d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

t_msgsnd: Use msgsnd()'s msgsz argument correctly to avoid overflow

Browse Source 
msgsnd's msgsz argument is the size of the message following the 'long'
message type.  Don't include the message type in the size of the message
when invoking msgsnd(2).

Reported by:	Coverity
CID:		1368712
Sponsored by:	Dell EMC Isilon
This commit is contained in:
Conrad Meyer 2017-03-29 21:26:13 +00:00
parent 34a1b5b258
commit ebf1bc1768
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=316179
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
contrib/netbsd-tests/lib/libc/sys/t_msgsnd.c
View File

@ -234,7 +234,7 @@ ATF_TC_BODY(msgsnd_nonblock, tc)
for (;;) {
errno = 0;
rv = msgsnd(id, &msg, sizeof(struct msg), IPC_NOWAIT);
rv = msgsnd(id, &msg, sizeof(msg.buf), IPC_NOWAIT);
if (rv == -1 && errno == EAGAIN)
_exit(EXIT_SUCCESS);