ahill/dhcpcd
1
0
Fork 0
mirror of https://github.com/NetworkConfiguration/dhcpcd.git synced 2026-01-26 14:13:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Don't work out buffers on a truncated header.

Browse Source
This commit is contained in:
Roy Marples 2025-11-30 12:58:38 +00:00
parent a3ce6980ad
commit cd75b08061
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/privsep-root.c
View File

@ -107,8 +107,12 @@ ps_root_readerrorcb(struct psr_ctx *psr_ctx)
/* After this point, we MUST do another recvmsg even on a failure
* to remove the message after peeking. */
if ((size_t)len < sizeof(*psr_error))
goto recv;
if ((size_t)len < sizeof(*psr_error)) {
/* We can't use the header to work out buffers, so
* remove the message and bail. */
(void)recvmsg(fd, &msg, MSG_WAITALL);
PSR_ERROR(EINVAL);
}
if (psr_ctx->psr_usemdata &&
psr_error->psr_datalen > psr_ctx->psr_mdatalen)
@ -139,7 +143,6 @@ ps_root_readerrorcb(struct psr_ctx *psr_ctx)
iov[1].iov_len = psr_error->psr_datalen;
}
recv:
len = recvmsg(fd, &msg, MSG_WAITALL);
if (len == -1)
PSR_ERROR(errno);