Re: fts...(improved patch)

From: Stas Kisel (stasat_private)
Date: Fri May 14 1999 - 03:37:03 PDT

  • Next message: Roger Espel Llima: "Re: LD_PRELOAD potential problems"

    > From: Jordan Ritter <jpr5at_private>
    > OpenBSD definitely has the same problem.  last thing I remember thinking
    > was that it was dying because realloc() was failing (as the fts stuff
    > realloc()'s memory as the path grows) ..
    
    fts realloc (pathlen+~1000b) of memory only, so realloc succeds.
    The bug is in the adjusting pointers after realloc().
    
    Next day after sending patch I've found another circumstanses that
    triggered similar bug in fts.
    This time some pointers were adjusted which did not belong to realloc()-ed
    memory chunk.
    
    Improved patch is below. Sorry for inconvenience.
    Probably there are some similar bugs in fts code or patch. Please let me
    know if you'll see any.
    
    \bye
    Stas
    
    ----------------------------- patch ----------------------------------
    --- /usr/src/lib/libc/gen/fts.c.orig	Tue May 11 13:37:49 1999
    +++ /usr/src/lib/libc/gen/fts.c	Fri May 14 14:02:58 1999
    @@ -740,8 +740,26 @@
     	 * If had to realloc the path, adjust the addresses for the rest
     	 * of the tree.
     	 */
    -	if (adjaddr)
    +	if (adjaddr){
     		fts_padjust(sp, adjaddr);
    +		/* Adjust the list, because we want to return it robust. */
    +/* fix p->fts_path and p->fts_accpath
    +   p->fts_accpath can be:
    +	either cur->fts_path	(adjust, because cur is already adjusted)
    +	either p->fts_path	(adjust)
    +	either p->fts_name	(do not adjust)
    +   I'm also almost sure that in first case cur->fts_path=p->fts_path...
    +*/
    +#define	ADJUST1(p) if((p)->fts_path != adjaddr){	\
    +	if((p)->fts_accpath != (p)->fts_name){		\
    +		(p)->fts_accpath =			\
    +			(char *)adjaddr + ((p)->fts_accpath - (p)->fts_path);\
    +	}						\
    +	(p)->fts_path = adjaddr;			\
    +}
    +		for (p = head; p; p = p->fts_link)
    +			ADJUST1(p);
    +	}
    
     	/*
     	 * If not changing directories, reset the path back to original
    @@ -974,18 +992,20 @@
     {
     	FTSENT *p;
    
    -#define	ADJUST(p) {							\
    -	(p)->fts_accpath =						\
    -	    (char *)addr + ((p)->fts_accpath - (p)->fts_path);		\
    +#define	ADJUST2(p) {							\
    +	if((p)->fts_accpath != (p)->fts_name){				\
    +		(p)->fts_accpath =					\
    +		    (char *)addr + ((p)->fts_accpath - (p)->fts_path);	\
    +	}								\
     	(p)->fts_path = addr;						\
     }
     	/* Adjust the current set of children. */
     	for (p = sp->fts_child; p; p = p->fts_link)
    -		ADJUST(p);
    +		ADJUST2(p);
    
     	/* Adjust the rest of the tree. */
     	for (p = sp->fts_cur; p->fts_level >= FTS_ROOTLEVEL;) {
    -		ADJUST(p);
    +		ADJUST2(p);
     		p = p->fts_link ? p->fts_link : p->fts_parent;
     	}
     }
    ----------------------------- /patch ----------------------------------
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:45:59 PDT