From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1NyrOF-00017i-Ml for qemu-devel@nongnu.org; Mon, 05 Apr 2010 14:51:15 -0400 Received: from [140.186.70.92] (port=40681 helo=eggs.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1NyrN1-0000Ul-Rc for qemu-devel@nongnu.org; Mon, 05 Apr 2010 14:50:07 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.69) (envelope-from ) id 1NyrBY-0001Jp-UO for qemu-devel@nongnu.org; Mon, 05 Apr 2010 14:38:14 -0400 Received: from are.twiddle.net ([75.149.56.221]:37811) by eggs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1NyrBY-0001Je-Om for qemu-devel@nongnu.org; Mon, 05 Apr 2010 14:38:08 -0400 Message-ID: <4BBA2E0F.9090802@twiddle.net> Date: Mon, 05 Apr 2010 11:38:07 -0700 From: Richard Henderson MIME-Version: 1.0 Subject: Re: [Qemu-devel] [PATCH 12/14] linux-user: Re-use load_elf_image for the main binary. References: <878d3e21b6ae87a80fda3a4653a3a2ba8e1e94bd.1270486025.git.rth@twiddle.net> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: malc Cc: qemu-devel@nongnu.org On 04/05/2010 11:14 AM, malc wrote: >> + } >> + interp_name = malloc(eppnt->p_filesz); > > malloc can fail > >> + >> + if (eppnt->p_offset + eppnt->p_filesz <= BPRM_BUF_SIZE) { >> + memcpy(interp_name, bprm_buf + eppnt->p_offset, >> + eppnt->p_filesz); >> + } else { >> + retval = pread(image_fd, interp_name, eppnt->p_filesz, > > Indentation seems off. Huh. I suspect that the whitespace fixup patch should have also eliminated tabs. I don't know how else that could have crept in there, since I have tab-expansion enabled in emacs. I'll incorporate the following into the next version. r~ --- diff --git a/linux-user/elfload.c b/linux-user/elfload.c index 7b854e2..e8eca86 100644 --- a/linux-user/elfload.c +++ b/linux-user/elfload.c @@ -1327,12 +1327,15 @@ static void load_elf_image(const char *image_name, int image_fd, goto exit_errmsg; } interp_name = malloc(eppnt->p_filesz); + if (!interp_name) { + goto exit_perror; + } if (eppnt->p_offset + eppnt->p_filesz <= BPRM_BUF_SIZE) { memcpy(interp_name, bprm_buf + eppnt->p_offset, eppnt->p_filesz); } else { - retval = pread(image_fd, interp_name, eppnt->p_filesz, + retval = pread(image_fd, interp_name, eppnt->p_filesz, eppnt->p_offset); if (retval != eppnt->p_filesz) { goto exit_perror;