mirror of
https://sourceware.org/git/glibc.git
synced 2024-11-27 11:43:34 +08:00
4b2e40a925
If glibc is build with -O3 on at least 390 (-m31) or x86 (-m32),
gcc 11 dumps this warning:
svc_tcp.c: In function 'rendezvous_request':
svc_tcp.c:274:3: error: 'memcpy' offset [0, 15] is out of the bounds [0, 0] [-Werror=array-bounds]
274 | memcpy (&xprt->xp_raddr, &addr, sizeof (addr));
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
cc1: all warnings being treated as errors
In out-of-memory case, if one of the mallocs in makefd_xprt function
returns NULL, a message is dumped, makefd_xprt returns NULL
and the subsequent memcpy would copy to NULL.
Instead of a segfaulting, we delay a bit (see also __svc_accept_failed
and Bug 14889 (CVE-2011-4609) - svc_run() produces high cpu usage when
accept() fails with EMFILE (CVE-2011-4609).
The same applies to svc_unix.c.
Reviewed-by: Adhemerval Zanella <adhemerval.zanella@linaro.org>
|
||
|---|---|---|
| .. | ||
| auth_des.h | ||
| auth_unix.h | ||
| auth.h | ||
| clnt.h | ||
| des_crypt.h | ||
| key_prot.h | ||
| netdb.h | ||
| pmap_clnt.h | ||
| pmap_prot.h | ||
| pmap_rmt.h | ||
| rpc_msg.h | ||
| rpc.h | ||
| svc_auth.h | ||
| svc.h | ||
| types.h | ||
| xdr.h | ||