Re: Fwd: Any user can panic OpenBSD machine

From: Warner Losh (impat_private)
Date: Mon Jul 27 1998 - 14:38:24 PDT

  • Next message: Todd C. Miller: "Re: Fwd: Any user can panic OpenBSD machine"

    In message <199807271932.NAA05034at_private> "Todd
    C. Miller" writes:
    : That's not correct behavior either.  iov_len is unsigned so making it
    : -1 (which is the unsigned value 4294967295) should not be an error.
    
    It should at least return EFAULT, which is documented for things that
    fall outside of the processes address space.
    
    However, on FreeBSD the man pages states:
         [EINVAL]      One of the iov_len values in the iov array was
                       negative.
         [EINVAL]      The sum of the iov_len values in the iov array
                       overflowed a 32-bit integer.
    
    Even though the values are declared u_int, they seem to be used in the
    code as signed numbers (maybe that's a problem), so return EINVAL for
    a number, cast to signed, that is negative seems appropriate.
    
    Warner
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:08:34 PDT