recvmsg bug
Thorsten Kukuk
kukuk@weber-eb.uni-paderborn.de
Fri Jul 31 06:59:00 GMT 1998
Hello,
I have found a bug in the recvmsg wrapper. In the current version, we try at
first to check, if we have enough space, and if we use SCM_CREDS. The problem
is, that the data buffer is not initialized. We could not test before the
syscall if SCM_CREDS is used. The next is, we don't need to check for enough
space, because the kernel struct is smaller then the libc ucred struct. We have
to check it later. I have added a patch, which fixes it for me. But I doubt
that it is correct, because the space check is missing. And I think we
overwrite the data following after the SCM_CREDS part.
Thorsten
--
Thorsten Kukuk kukuk@vt.uni-paderborn.de
http://www-vt.uni-paderborn.de/~kukuk
Linux is like a Vorlon. It is incredibly powerful, gives terse,
cryptic answers and has a lot of things going on in the background.
More information about the Libc-hacker
mailing list