[PATCH] [BZ 17542] sunrpc: conditional jump depends on uninitialised value in svc_getreq_common
Siddhesh Poyarekar
siddhesh@redhat.com
Wed Dec 10 08:36:00 GMT 2014
On Wed, Dec 10, 2014 at 09:26:26AM +0100, Andreas Schwab wrote:
> We should first understand what is the real bug.
The real bug is in the calling application, which calls svc_getreq on
a file descriptor that it did not register. We're patching this in
sunrpc so that the check in svc_getreq_common below that was supposed
to catch such conditions actually works.
...
xprt = xports[fd];
/* Do we control fd? */
if (xprt == NULL)
return;
...
Siddhesh
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 473 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20141210/aa9e3f5e/attachment.sig>
More information about the Libc-alpha
mailing list