[lxc-devel] [lxc/master] c/r: zero a smaller than known migrate_opts struct
tych0 on Github
lxc-bot at linuxcontainers.org
Thu Sep 8 18:33:05 UTC 2016
A non-text attachment was scrubbed...
Name: not available
Type: text/x-mailbox
Size: 361 bytes
Desc: not available
URL: <http://lists.linuxcontainers.org/pipermail/lxc-devel/attachments/20160908/88a8cd5a/attachment.bin>
-------------- next part --------------
From 2cb80427bc468f7647309c3eca66cfc9afa85b61 Mon Sep 17 00:00:00 2001
From: Tycho Andersen <tycho.andersen at canonical.com>
Date: Thu, 8 Sep 2016 09:14:42 -0600
Subject: [PATCH] c/r: zero a smaller than known migrate_opts struct
Signed-off-by: Tycho Andersen <tycho.andersen at canonical.com>
---
src/lxc/lxccontainer.c | 20 +++++++++++++++++---
1 file changed, 17 insertions(+), 3 deletions(-)
diff --git a/src/lxc/lxccontainer.c b/src/lxc/lxccontainer.c
index 5721977..c02e587 100644
--- a/src/lxc/lxccontainer.c
+++ b/src/lxc/lxccontainer.c
@@ -3960,6 +3960,7 @@ static int do_lxcapi_migrate(struct lxc_container *c, unsigned int cmd,
struct migrate_opts *opts, unsigned int size)
{
int ret;
+ struct migrate_opts *valid_opts = opts;
/* If the caller has a bigger (newer) struct migrate_opts, let's make
* sure that the stuff on the end is zero, i.e. that they didn't ask us
@@ -3978,15 +3979,28 @@ static int do_lxcapi_migrate(struct lxc_container *c, unsigned int cmd,
}
}
+ /* If the caller has a smaller struct, let's zero out the end for them
+ * so we don't accidentally use bits of it that they didn't know about
+ * to initialize.
+ */
+ if (size < sizeof(*opts)) {
+ valid_opts = malloc(sizeof(*opts));
+ if (!valid_opts)
+ return -ENOMEM;
+
+ memset(valid_opts, 0, sizeof(*opts));
+ memcpy(valid_opts, opts, size);
+ }
+
switch (cmd) {
case MIGRATE_PRE_DUMP:
- ret = !__criu_pre_dump(c, opts);
+ ret = !__criu_pre_dump(c, valid_opts);
break;
case MIGRATE_DUMP:
- ret = !__criu_dump(c, opts);
+ ret = !__criu_dump(c, valid_opts);
break;
case MIGRATE_RESTORE:
- ret = !__criu_restore(c, opts);
+ ret = !__criu_restore(c, valid_opts);
break;
default:
ERROR("invalid migrate command %u", cmd);
More information about the lxc-devel
mailing list