1
0
mirror of https://sourceware.org/git/glibc.git synced 2025-07-28 00:21:52 +03:00

Linux: Adjust gedents64 buffer size to int range [BZ #24740]

The kernel interface uses type unsigned int, but there is an
internal conversion to int, so INT_MAX is the correct limit.
Part of the buffer will always be unused, but this is not a
problem.  Such huge buffers do not occur in practice anyway.

Reviewed-by: Adhemerval Zanella <adhemerval.zanella@linaro.org>
This commit is contained in:
Florian Weimer
2019-06-27 15:08:40 +02:00
parent d039da1c00
commit a620bd7935
4 changed files with 67 additions and 0 deletions

View File

@ -23,12 +23,18 @@
#include <sys/param.h>
#include <unistd.h>
#include <scratch_buffer.h>
#include <limits.h>
ssize_t
__getdents64 (int fd, void *buf0, size_t nbytes)
{
char *buf = buf0;
/* The system call takes an unsigned int argument, and some length
checks in the kernel use an int type. */
if (nbytes > INT_MAX)
nbytes = INT_MAX;
#ifdef __NR_getdents64
ssize_t ret = INLINE_SYSCALL_CALL (getdents64, fd, buf, nbytes);
if (ret != -1)