[systemd-devel] [PATCH] journal: fix against (theoretical) undefined behavior

2013-12-16 Thread Shawn Landden
While all the libc implementations I know return NULL when memchr's size
parameter is 0, without accessing any memory, passing NULL to memchr is
still invalid:

C11 7.24.1p2: Where an argument declared as size_t n specifies the length
of the array for a function, n can have the value zero on a call to that
function. Unless explicitly stated otherwise in the description of a
particular function in this subclause, pointer arguments on such a call
shall still have valid values, as described in 7.1.4. On such a call, a
function that locates a character finds no occurrence, a function that
compares two character sequences returns zero, and a function that copies
characters copies zero characters.

see http://llvm.org/bugs/show_bug.cgi?id=18247
---
 src/journal/journal-file.c | 5 -
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/journal/journal-file.c b/src/journal/journal-file.c
index 4009b29..c6c9f5d 100644
--- a/src/journal/journal-file.c
+++ b/src/journal/journal-file.c
@@ -1010,7 +1010,10 @@ static int journal_file_append_data(
 if (r  0)
 return r;
 
-eq = memchr(data, '=', size);
+if (!data)
+eq = NULL;
+else
+eq = memchr(data, '=', size);
 if (eq  eq  data) {
 uint64_t fp;
 Object *fo;
-- 
1.8.5.1

___
systemd-devel mailing list
systemd-devel@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/systemd-devel


Re: [systemd-devel] [PATCH] journal: fix against (theoretical) undefined behavior

2013-12-16 Thread Zbigniew Jędrzejewski-Szmek
On Mon, Dec 16, 2013 at 03:41:00PM -0800, Shawn Landden wrote:
 While all the libc implementations I know return NULL when memchr's size
 parameter is 0, without accessing any memory, passing NULL to memchr is
 still invalid:
 
 C11 7.24.1p2: Where an argument declared as size_t n specifies the length
 of the array for a function, n can have the value zero on a call to that
 function. Unless explicitly stated otherwise in the description of a
 particular function in this subclause, pointer arguments on such a call
 shall still have valid values, as described in 7.1.4. On such a call, a
 function that locates a character finds no occurrence, a function that
 compares two character sequences returns zero, and a function that copies
 characters copies zero characters.
This analysis seems correct. Applied.

Zbyszek
___
systemd-devel mailing list
systemd-devel@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/systemd-devel