Attachment 618000 Details for Bug 861032 – Proposed patch

[patch] Proposed patch

2012-09-27-0001-flatiron-Don-t-access-invalid-mem-in-totemconfig.patch (text/plain), 1.28 KB, created by Jan Friesse on 2012-09-27 11:03:18 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jan Friesse

Created: 2012-09-27 11:03:18 UTC

Size: 1.28 KB

patch

obsolete

>From 390a7a1b4e89ea19431b50c0a0b8f87612b1a023 Mon Sep 17 00:00:00 2001
>From: Jan Friesse <jfriesse@redhat.com>
>Date: Thu, 27 Sep 2012 12:42:11 +0200
>Subject: [PATCH] flatiron: Don't access invalid mem in totemconfig
>
>When ringnumber in config file was set to value bigger or equal to
>INTERFACE_MAX, we are using this big value as index to totemconfig
>interfaces array, resulting to access to invalid memory and segfault.
>
>Instead of that, ringnumber is now checked and proper error message is
>printed if value is too big.
>
>Signed-off-by: Jan Friesse <jfriesse@redhat.com>
>---
> exec/totemconfig.c |   10 ++++++++++
> 1 files changed, 10 insertions(+), 0 deletions(-)
>
>diff --git a/exec/totemconfig.c b/exec/totemconfig.c
>index 8de3243..99dd815 100644
>--- a/exec/totemconfig.c
>+++ b/exec/totemconfig.c
>@@ -364,6 +364,16 @@ printf ("couldn't find totem handle\n");
> 
> 		objdb_get_int (objdb, object_interface_handle, "ringnumber", &ringnumber);
> 
>+
>+		if (ringnumber >= INTERFACE_MAX) {
>+			snprintf (error_string_response, sizeof(error_string_response),
>+			    "parse error in config: interface ring number %u is bigger then allowed maximum %u\n",
>+			    ringnumber, INTERFACE_MAX - 1);
>+
>+			*error_string = error_string_response;
>+			return -1;
>+		}
>+
> 		/*
> 		 * Get interface multicast address
> 		 */
>-- 
>1.7.1
>

Actions: View | Diff

Attachments on bug 861032: 618000