Attachment 718024 Details for Bug 929101 – 6.4.z-bz929101-3-coroipcs-Ensure-rb-data-are-not-overwritten

[patch] 6.4.z-bz929101-3-coroipcs-Ensure-rb-data-are-not-overwritten

bz929101-3-coroipcs-Ensure-rb-data-are-not-overwritten.patch (text/plain), 1.19 KB, created by Jan Friesse on 2013-03-29 10:50:44 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jan Friesse

Created: 2013-03-29 10:50:44 UTC

Size: 1.19 KB

patch

obsolete

>From c7e686181bcd0e975b09725502bef02c7d0c338a Mon Sep 17 00:00:00 2001
>From: Jan Friesse <jfriesse@redhat.com>
>Date: Thu, 7 Mar 2013 17:51:32 +0100
>Subject: [PATCH] coroipcs: Ensure rb data are not overwritten
>
>With introduce of rb alignment (55600762), it's not enough to subtract
>one from number of free bytes, but also alignment must be taken to
>account. Easiest solution is to subtract 9 bytes.
>
>Signed-off-by: Jan Friesse <jfriesse@redhat.com>
>Reviewed-by: Steven Dake <sdake@redhat.com>
>---
> exec/coroipcs.c |   12 ++++++++++--
> 1 files changed, 10 insertions(+), 2 deletions(-)
>
>diff --git a/exec/coroipcs.c b/exec/coroipcs.c
>index 1adb7ae..36d18a4 100644
>--- a/exec/coroipcs.c
>+++ b/exec/coroipcs.c
>@@ -1225,8 +1225,16 @@ static int shared_mem_dispatch_bytes_left (const struct conn_info *conn_info)
> 	} else {
> 		bytes_left = n_read - n_write;
> 	}
>-	if (bytes_left > 0) {
>-		bytes_left--;
>+
>+	/*
>+	 * Pointers in ring buffer are 64-bit alignment (in memcpy_dwrap)
>+	 * To ensure we will not overwrite previous data,
>+	 * 9 bytes (64-bit + 1 byte) are subtracted from bytes_left
>+	 */
>+	if (bytes_left < 9) {
>+		bytes_left = 0;
>+	} else {
>+		bytes_left = bytes_left - 9;
> 	}
> 
> 	return (bytes_left);
>-- 
>1.7.1
>

Actions: View | Diff

Attachments on bug 929101: 718022 | 718023 | 718024 | 718025