[PATCH] [BZ 17542] sunrpc: conditional jump depends on uninitialised value in svc_getreq_common

Siddhesh Poyarekar siddhesh@redhat.com
Wed Dec 10 08:36:00 GMT 2014


On Wed, Dec 10, 2014 at 09:26:26AM +0100, Andreas Schwab wrote:
> We should first understand what is the real bug.

The real bug is in the calling application, which calls svc_getreq on
a file descriptor that it did not register.  We're patching this in
sunrpc so that the check in svc_getreq_common below that was supposed
to catch such conditions actually works.

...
  xprt = xports[fd];
  /* Do we control fd? */
  if (xprt == NULL)
     return;
...

Siddhesh
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 473 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20141210/aa9e3f5e/attachment.sig>


More information about the Libc-alpha mailing list