This is the mail archive of the libc-alpha@sourceware.org mailing list for the glibc project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: [PATCH] Adjust pointers to triplets in netgroup query data (BZ #16474)


OndÅej BÃlka <neleai@seznam.cz> writes:

> On Fri, Jan 24, 2014 at 04:18:43PM +0100, Andreas Schwab wrote:
>> Siddhesh Poyarekar <siddhesh@redhat.com> writes:
>> 
>> > @@ -241,7 +241,17 @@ addgetnetgrentX (struct database_dyn *db, int fd, request_header *req,
>> >  				if (buflen - req->key_len - bufused < needed)
>> >  				  {
>> >  				    buflen += MAX (buflen, 2 * needed);
>> > -				    buffer = xrealloc (buffer, buflen);
>> > +				    char *newbuf = xrealloc (buffer, buflen);
>> > +				    /* Adjust the pointers in the new
>> > +				       buffer.  */
>> > +				    nhost = (nhost ? newbuf + (nhost - buffer)
>> 
>> This is undefined.  If realloc was sucessful then buffer is no longer
>> valid.  You need to compute nhost - buffer before doing the realloc.
>> 
> As these are not referenced it leads to equivalent code.

That doesn't matter.  It's undefined, period.

> Only problem with that code would be static analyzer flagging this as
> false positive.

And any future compiler that exploits the undefinedness.  It's not a
false positive.

Andreas.

-- 
Andreas Schwab, schwab@linux-m68k.org
GPG Key fingerprint = 58CA 54C7 6D53 942B 1756  01D3 44D5 214B 8276 4ED5
"And now for something completely different."


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]