[PATCH] more out of bounds checking improvements
Florian Weimer
fweimer@redhat.com
Mon Oct 26 15:41:55 GMT 2020
* Martin Sebor via Libc-alpha:
> Besides attribute access, the change adds attribute nonnull to
> the readv and writev functions in misc/sys/uio.h. The functions
> don't necessarily access the array elements when their count is
> zero but neither POSIX nor the Linux manual document this so it
> seems appropriate to warn.
This change is questionable because it breaks interoperability with
abstract data types such as std::vector, where the base pointer can be
null when the array is empty. The kernel does not return EFAULT in this
case, as expected.
I think we need a special case for this.
Thanks,
Florian
--
Red Hat GmbH, https://de.redhat.com/ , Registered seat: Grasbrunn,
Commercial register: Amtsgericht Muenchen, HRB 153243,
Managing Directors: Charles Cachera, Brian Klemm, Laurie Krebs, Michael O'Neill
More information about the Libc-alpha
mailing list