From: Florian Westphal <fw@strlen.de>
To: David Ahern <dsahern@gmail.com>
Cc: Florian Westphal <fw@strlen.de>, netdev@vger.kernel.org
Subject: Re: [PATCH iproute2] mptcp: avoid uninitialised errno usage
Date: Mon, 10 May 2021 00:25:49 +0200 [thread overview]
Message-ID: <20210509222549.GE4038@breakpoint.cc> (raw)
In-Reply-To: <b8d9cc70-7667-d2b3-50b6-0ef0ce041735@gmail.com>
David Ahern <dsahern@gmail.com> wrote:
> On 5/3/21 4:36 AM, Florian Westphal wrote:
> > The function called *might* set errno based on errno value in NLMSG_ERROR
> > message, but in case no such message exists errno is left alone.
> >
> > This may cause ip to fail with
> > "can't subscribe to mptcp events: Success"
> >
> > on kernels that support mptcp but lack event support (all kernels <= 5.11).
> >
> > Set errno to a meaningful value. This will then still exit with the
> > more specific 'permission denied' or some such when called by process
> > that lacks CAP_NET_ADMIN on 5.12 and later.
> >
> > Fixes: ff619e4fd370 ("mptcp: add support for event monitoring")
> > Signed-off-by: Florian Westphal <fw@strlen.de>
> > ---
> > ip/ipmptcp.c | 3 +++
> > 1 file changed, 3 insertions(+)
> >
> > diff --git a/ip/ipmptcp.c b/ip/ipmptcp.c
> > index 5f490f0026d9..504b5b2f5329 100644
> > --- a/ip/ipmptcp.c
> > +++ b/ip/ipmptcp.c
> > @@ -491,6 +491,9 @@ out:
> >
> > static int mptcp_monitor(void)
> > {
> > + /* genl_add_mcast_grp may or may not set errno */
> > + errno = EOPNOTSUPP;
> > +
> > if (genl_add_mcast_grp(&genl_rth, genl_family, MPTCP_PM_EV_GRP_NAME) < 0) {
> > perror("can't subscribe to mptcp events");
> > return 1;
> >
>
> Seems like this should be set in genl_add_mcast_grp vs its caller.
I think setting errno in libraries (libc excluded) is a bad design
choice. If you still disagree, then I can respin, but it would get a
bit more ugly, e.g. (untested!):
diff --git a/lib/libgenl.c b/lib/libgenl.c
--- a/lib/libgenl.c
+++ b/lib/libgenl.c
@@ -100,20 +100,29 @@ int genl_add_mcast_grp(struct rtnl_handle *grth, __u16 fnum, const char *group)
addattr16(&req.n, sizeof(req), CTRL_ATTR_FAMILY_ID, fnum);
+ /* clear errno to set a default value if needed */
+ errno = 0;
+
if (rtnl_talk(grth, &req.n, &answer) < 0) {
fprintf(stderr, "Error talking to the kernel\n");
+ if (errno == 0)
+ errno = EOPNOTSUPP;
return -2;
}
ghdr = NLMSG_DATA(answer);
len = answer->nlmsg_len;
- if (answer->nlmsg_type != GENL_ID_CTRL)
+ if (answer->nlmsg_type != GENL_ID_CTRL) {
+ errno = EINVAL;
goto err_free;
+ }
len -= NLMSG_LENGTH(GENL_HDRLEN);
- if (len < 0)
+ if (len < 0) {
+ errno = EINVAL;
goto err_free;
+ }
attrs = (struct rtattr *) ((char *) ghdr + GENL_HDRLEN);
parse_rtattr(tb, CTRL_ATTR_MAX, attrs, len);
@@ -130,6 +139,10 @@ int genl_add_mcast_grp(struct rtnl_handle *grth, __u16 fnum, const char *group)
err_free:
free(answer);
+
+ if (ret < 0 && errno == 0)
+ errno = EOPNOTSUPP;
+
return ret;
}
next prev parent reply other threads:[~2021-05-09 22:25 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-05-03 10:36 [PATCH iproute2] mptcp: avoid uninitialised errno usage Florian Westphal
2021-05-09 22:11 ` David Ahern
2021-05-09 22:25 ` Florian Westphal [this message]
2021-05-09 22:44 ` David Ahern
2021-05-09 22:55 ` Florian Westphal
2021-05-09 23:38 ` David Ahern
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20210509222549.GE4038@breakpoint.cc \
--to=fw@strlen.de \
--cc=dsahern@gmail.com \
--cc=netdev@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox