---
** [tickets:#1247] mds/TCP: wrong size memcpy if USRBUF chain(payload) are
contiguous memory**
**Status:** assigned
**Milestone:** 4.6.FC
**Created:** Tue Jan 27, 2015 04:30 AM UTC by A V Mahesh (AVM)
**Last Updated:** Tue Jan 27, 2015 04:30 AM UTC
**Owner:** A V Mahesh (AVM)
This in the TCP flow of MDS
In the process of code walk in the context of debugging some application
segfault, we fund on bug , USRBUF contiguous memory ( non-stranded-path system
has vey less memory) case of fragment and send function.
If USRBUF chain(payload) are contiguous MMGR_DATA_AT_START doesn't copy the
buffer , application need to copy the buffer, in that memcpy() the size was
wrong/overflowing.
This need to be corrected as follws
@@ -2246,7 +2246,7 @@ uint32_t mdtm_frag_and_send(MDTM_SEND_RE
memcpy(&body[SUM_MDS_HDR_PLUS_MDTM_HDR_PLUS_LEN], p8, len_buf);
memcpy(&body[SUM_MDS_HDR_PLUS_MDTM_HDR_PLUS_LEN], p8, (len_buf -
SUM_MDS_HDR_PLUS_MDTM_HDR_PLUS_LEN));
---
Sent from sourceforge.net because [email protected] is
subscribed to https://sourceforge.net/p/opensaf/tickets/
To unsubscribe from further messages, a project admin can change settings at
https://sourceforge.net/p/opensaf/admin/tickets/options. Or, if this is a
mailing list, you can unsubscribe from the mailing list.------------------------------------------------------------------------------
Dive into the World of Parallel Programming. The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Opensaf-tickets mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/opensaf-tickets
