Fix invalid write to static buffer in parse_addr_arg
This commit is contained in:
+12
-8
@@ -184,27 +184,31 @@ bool addr_eql(Address a, Address b)
|
|||||||
return true;
|
return true;
|
||||||
}
|
}
|
||||||
|
|
||||||
int parse_addr_arg(char *arg, Address *out)
|
int parse_addr_arg(string arg, Address *out)
|
||||||
{
|
{
|
||||||
int len = strlen(arg);
|
char buf[1<<7];
|
||||||
|
if (arg.len >= (int) sizeof(buf))
|
||||||
|
return -1;
|
||||||
|
memcpy(buf, arg.ptr, arg.len);
|
||||||
|
arg.ptr = buf;
|
||||||
|
|
||||||
int i = 0;
|
int i = 0;
|
||||||
while (i < len && arg[i] != ':')
|
while (i < arg.len && arg.ptr[i] != ':')
|
||||||
i++;
|
i++;
|
||||||
|
|
||||||
if (i == len)
|
if (i == arg.len)
|
||||||
return -1; // No ':' character.
|
return -1; // No ':' character.
|
||||||
arg[i] = '\0';
|
arg.ptr[i] = '\0';
|
||||||
|
|
||||||
IPv4 ipv4;
|
IPv4 ipv4;
|
||||||
int ret = inet_pton(AF_INET, arg, &ipv4);
|
int ret = inet_pton(AF_INET, arg.ptr, &ipv4);
|
||||||
arg[i] = ':';
|
arg.ptr[i] = ':';
|
||||||
|
|
||||||
if (ret != 1)
|
if (ret != 1)
|
||||||
return -1;
|
return -1;
|
||||||
|
|
||||||
errno = 0;
|
errno = 0;
|
||||||
ret = atoi(arg + i + 1);
|
ret = atoi(arg.ptr + i + 1);
|
||||||
if (ret == 0 && errno != 0)
|
if (ret == 0 && errno != 0)
|
||||||
return -1;
|
return -1;
|
||||||
|
|
||||||
|
|||||||
+1
-1
@@ -57,7 +57,7 @@ void append_hex_as_str(char *out, SHA256 hash);
|
|||||||
bool addr_eql(Address a, Address b);
|
bool addr_eql(Address a, Address b);
|
||||||
bool addr_lower(Address a, Address b);
|
bool addr_lower(Address a, Address b);
|
||||||
|
|
||||||
int parse_addr_arg(char *arg, Address *out);
|
int parse_addr_arg(string arg, Address *out);
|
||||||
void addr_sort(Address *addrs, int count);
|
void addr_sort(Address *addrs, int count);
|
||||||
|
|
||||||
#endif // BASIC_INCLUDED
|
#endif // BASIC_INCLUDED
|
||||||
|
|||||||
+1
-1
@@ -140,7 +140,7 @@ ToastyFS *toastyfs_init(uint64_t client_id, char **addrs, int num_addrs)
|
|||||||
tfs->request_id = 0;
|
tfs->request_id = 0;
|
||||||
|
|
||||||
for (int i = 0; i < num_addrs; i++) {
|
for (int i = 0; i < num_addrs; i++) {
|
||||||
if (parse_addr_arg(addrs[i], &tfs->server_addrs[i]) < 0) {
|
if (parse_addr_arg((string) { addrs[i], strlen(addrs[i]) }, &tfs->server_addrs[i]) < 0) {
|
||||||
free(tfs);
|
free(tfs);
|
||||||
return NULL;
|
return NULL;
|
||||||
}
|
}
|
||||||
|
|||||||
+1
-1
@@ -39,7 +39,7 @@ int http_proxy_init(void *state, int argc, char **argv,
|
|||||||
|
|
||||||
// TODO: Make these configurable
|
// TODO: Make these configurable
|
||||||
int max_opers = 128;
|
int max_opers = 128;
|
||||||
char *http_addr = "127.0.0.1:3000";
|
string http_addr = S("127.0.0.1:3000");
|
||||||
uint64_t client_id = 999;
|
uint64_t client_id = 999;
|
||||||
|
|
||||||
proxy->max_opers = max_opers;
|
proxy->max_opers = max_opers;
|
||||||
|
|||||||
+2
-2
@@ -1317,7 +1317,7 @@ int server_init(void *state_, int argc, char **argv,
|
|||||||
fprintf(stderr, "Option --addr missing value. Usage is --addr <addr>:<port>\n");
|
fprintf(stderr, "Option --addr missing value. Usage is --addr <addr>:<port>\n");
|
||||||
return -1;
|
return -1;
|
||||||
}
|
}
|
||||||
int ret = parse_addr_arg(argv[i], &state->self_addr);
|
int ret = parse_addr_arg((string) { argv[i], strlen(argv[i]) }, &state->self_addr);
|
||||||
if (ret < 0) {
|
if (ret < 0) {
|
||||||
fprintf(stderr, "Malformed <addr>:<port> pair for --addr option\n");
|
fprintf(stderr, "Malformed <addr>:<port> pair for --addr option\n");
|
||||||
return -1;
|
return -1;
|
||||||
@@ -1337,7 +1337,7 @@ int server_init(void *state_, int argc, char **argv,
|
|||||||
fprintf(stderr, "Node limit of %d reached\n", NODE_LIMIT);
|
fprintf(stderr, "Node limit of %d reached\n", NODE_LIMIT);
|
||||||
return -1;
|
return -1;
|
||||||
}
|
}
|
||||||
int ret = parse_addr_arg(argv[i], &state->node_addrs[state->num_nodes]);
|
int ret = parse_addr_arg((string) { argv[i], strlen(argv[i]) }, &state->node_addrs[state->num_nodes]);
|
||||||
if (ret < 0) {
|
if (ret < 0) {
|
||||||
fprintf(stderr, "Malformed <addr>:<port> pair for --peer option\n");
|
fprintf(stderr, "Malformed <addr>:<port> pair for --peer option\n");
|
||||||
return -1;
|
return -1;
|
||||||
|
|||||||
Reference in New Issue
Block a user