Hi,

On Wed, Oct 07, 2009 at 10:25:10PM +0200, Jakub Bogusz wrote:
[...]
> OK, updated patch attached.

There are two issues remained which should be addressed.

First, redundancy should be avoided.
You patch introduces 4 very similar copies of sembuf parser.

Second, user input should not be trusted at all.
Please try your patch with the following example:

$ cat semop.c
#include <sys/sem.h>
int main(void) {
        return semop(-1, (struct sembuf *) main, 0x1000000) < 0;
}

I pushed a fix on top of your patch to
http://strace.git.sourceforge.net/git/gitweb.cgi?p=strace/strace;a=shortlog;h=ldv/sembuf
Please test.

> BTW, there are unchecked umoves in already existing sys_msgsnd() and
> sys_msgrcv()...

Yes, it should be fixed, too.


-- 
ldv

Attachment: pgpmUdM6wIW9p.pgp
Description: PGP signature

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Strace-devel mailing list
Strace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/strace-devel

Reply via email to