diff options
author | Rich Felker <dalias@aerifal.cx> | 2019-06-28 17:58:03 -0400 |
---|---|---|
committer | Rich Felker <dalias@aerifal.cx> | 2019-06-28 17:58:03 -0400 |
commit | 3d178a7e2b75066593fbd5705742c5808395d90d (patch) | |
tree | da5f36fbd4c0508a62eca103c77bf2db7b15e15b /src/linux | |
parent | 54b7564b72c1edcc79fca083047521fb56eaea00 (diff) | |
download | musl-3d178a7e2b75066593fbd5705742c5808395d90d.tar.gz musl-3d178a7e2b75066593fbd5705742c5808395d90d.tar.bz2 musl-3d178a7e2b75066593fbd5705742c5808395d90d.tar.xz musl-3d178a7e2b75066593fbd5705742c5808395d90d.zip |
cap getdents length argument to INT_MAX
the linux syscall treats this argument as having type int, so passing
extremely long buffer sizes would be misinterpreted by the kernel.
since "short reads" are always acceptable, just cap it down.
patch based on report and suggested change by Florian Weimer.
Diffstat (limited to 'src/linux')
-rw-r--r-- | src/linux/getdents.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/linux/getdents.c b/src/linux/getdents.c index de6de3b4..796c1e5c 100644 --- a/src/linux/getdents.c +++ b/src/linux/getdents.c @@ -1,9 +1,11 @@ #define _BSD_SOURCE #include <dirent.h> +#include <limits.h> #include "syscall.h" int getdents(int fd, struct dirent *buf, size_t len) { + if (len>INT_MAX) len = INT_MAX; return syscall(SYS_getdents, fd, buf, len); } |