Hi Andrew,

On 03/21/2016 05:10 PM, Andrew Zaborowski wrote:
> It seems that l_dbus_message_iter_get_type can't be used to get the

Its for sure :)

> value of a single argument and be called repeatedly, it might crash if
> the number and types of call arguments don't match the message arguments.
> Add a comment explaining why arguments after first non-string argument
> are not considered.
> ---
>   ell/dbus-message.c | 34 ++++++++++++++++++++++++++++------
>   1 file changed, 28 insertions(+), 6 deletions(-)
>
> diff --git a/ell/dbus-message.c b/ell/dbus-message.c
> index 0b412b2..a7c9699 100644
> --- a/ell/dbus-message.c
> +++ b/ell/dbus-message.c
> @@ -1419,6 +1419,7 @@ bool _dbus_kernel_calculate_bloom(struct l_dbus_message *message,
>   	struct l_dbus_message_iter iter;
>   	uint8_t argn;
>   	char buf[256];
> +	bool (*get_basic)(struct l_dbus_message_iter *, char, void *);
>
>   	/* The string "interface:" suffixed by the interface name */
>   	attr = l_dbus_message_get_interface(message);
> @@ -1462,17 +1463,38 @@ bool _dbus_kernel_calculate_bloom(struct l_dbus_message *message,
>
>   	body = _dbus_message_get_body(message, &body_size);
>
> -	if (_dbus_message_is_gvariant(message))
> -		_gvariant_iter_init(&iter, message, signature, NULL,
> -					body, body_size);
> -	else
> +	if (_dbus_message_is_gvariant(message)) {
> +		if (!_gvariant_iter_init(&iter, message, signature, NULL,
> +						body, body_size))
> +			return false;
> +
> +		get_basic = _gvariant_iter_next_entry_basic;
> +	} else {
>   		_dbus1_iter_init(&iter, message, signature, NULL,
> -				body, body_size);
> +					body, body_size);
> +
> +		get_basic = _dbus1_iter_next_entry_basic;
> +	}
>
>   	argn = 0;
>
> +	/*
> +	 * Stop iteration on the first non-string argument even though
> +	 * this may lead to legitimate signals not reaching peers that
> +	 * have set up seemingly correct kernel-side filters.

What's this 'legitimate' business ;)  Can we simply quote DBUS1-PORTING 
document or whatever from libsystemd sd-bus?

> +	 *
> +	 * "If the first argument of the message is a string,
> +	 * "arg0-slash-prefix" suffixed with the first argument, and also
> +	 * all prefixes of the argument (cut off at "/"), also prefixed
> +	 * with "arg0-slash-prefix".
> +	 *
> +	 * Similar for all further arguments that are strings up to 63,
> +	 * for the arguments and their "dot" and "slash" prefixes. On the
> +	 * first argument that is not a string, addition to the bloom
> +	 * filter should be stopped however."
> +	 */
>   	while (*signature == 's' || *signature == 'o' || *signature == 'g') {
> -		if (!message_iter_next_entry(&iter, &attr))
> +		if (!get_basic(&iter, *signature, &attr))
>   			return false;
>
>   		sprintf(buf, "arg%hhu", argn);
>

Regards,
-Denis