summaryrefslogtreecommitdiffstats
path: root/net/wanrouter
diff options
context:
space:
mode:
authorChuck Lever <chuck.lever@oracle.com>2009-04-24 01:31:25 +0200
committerJ. Bruce Fields <bfields@citi.umich.edu>2009-04-28 19:54:25 +0200
commitabc5c44d6284fab8fb21bcfc52c0f16f980637df (patch)
tree98825098d3f6488a1a8fb55ec40131313b1d25e9 /net/wanrouter
parentnet/sunrpc/svc_xprt.c: fix sparse warnings (diff)
downloadlinux-abc5c44d6284fab8fb21bcfc52c0f16f980637df.tar.xz
linux-abc5c44d6284fab8fb21bcfc52c0f16f980637df.zip
SUNRPC: Fix error return value of svc_addr_len()
The svc_addr_len() helper function returns -EAFNOSUPPORT if it doesn't recognize the address family of the passed-in socket address. However, the return type of this function is size_t, which means -EAFNOSUPPORT is turned into a very large positive value in this case. The check in svc_udp_recvfrom() to see if the return value is less than zero therefore won't work at all. Additionally, handle_connect_req() passes this value directly to memset(). This could cause memset() to clobber a large chunk of memory if svc_addr_len() has returned an error. Currently the address family of these addresses, however, is known to be supported long before handle_connect_req() is called, so this isn't a real risk. Change the error return value of svc_addr_len() to zero, which fits in the range of size_t, and is safer to pass to memset() directly. Signed-off-by: Chuck Lever <chuck.lever@oracle.com> Signed-off-by: J. Bruce Fields <bfields@citi.umich.edu>
Diffstat (limited to 'net/wanrouter')
0 files changed, 0 insertions, 0 deletions