From: Chen Gang <gang.chen.5i5j@gmail.com>
To: Markus Armbruster <armbru@redhat.com>
Cc: "Aneesh Kumar K.V" <aneesh.kumar@linux.vnet.ibm.com>,
aliguori@amazon.com, QEMU Developers <qemu-devel@nongnu.org>
Subject: Re: [Qemu-devel] [PATCH 3/3] hw/9pfs: use g_strdup_printf() instead of PATH_MAX limitation
Date: Mon, 03 Mar 2014 18:51:30 +0800 [thread overview]
Message-ID: <53145EB2.9080106@gmail.com> (raw)
In-Reply-To: <87siqz65q0.fsf@blackfin.pond.sub.org>
On 03/03/2014 04:34 PM, Markus Armbruster wrote:
> Chen Gang <gang.chen.5i5j@gmail.com> writes:
>
>> When path is truncated by PATH_MAX limitation, it causes QEMU to access
>> incorrect file. So use original full path instead of PATH_MAX within
>> 9pfs (need check/process ENOMEM for related memory allocation).
>>
>> The related test:
> [...]
>> Signed-off-by: Chen Gang <gang.chen.5i5j@gmail.com>
>> ---
>> hw/9pfs/cofs.c | 15 ++-
>> hw/9pfs/virtio-9p-handle.c | 9 +-
>> hw/9pfs/virtio-9p-local.c | 285 +++++++++++++++++++++++++++--------------
>> hw/9pfs/virtio-9p-posix-acl.c | 52 ++++++--
>> hw/9pfs/virtio-9p-xattr-user.c | 27 +++-
>> hw/9pfs/virtio-9p-xattr.c | 9 +-
>> hw/9pfs/virtio-9p-xattr.h | 27 +++-
>> hw/9pfs/virtio-9p.h | 6 +-
>> 8 files changed, 292 insertions(+), 138 deletions(-)
>>
>> diff --git a/hw/9pfs/cofs.c b/hw/9pfs/cofs.c
>> index 3891050..739bad0 100644
>> --- a/hw/9pfs/cofs.c
>> +++ b/hw/9pfs/cofs.c
>> @@ -20,18 +20,24 @@
>> int v9fs_co_readlink(V9fsPDU *pdu, V9fsPath *path, V9fsString *buf)
>> {
>> int err;
>> - ssize_t len;
>> + ssize_t len, maxlen = PATH_MAX;
>> V9fsState *s = pdu->s;
>>
>> if (v9fs_request_cancelled(pdu)) {
>> return -EINTR;
>> }
>> - buf->data = g_malloc(PATH_MAX);
>> + buf->data = g_malloc(maxlen);
>> v9fs_path_read_lock(s);
>> v9fs_co_run_in_worker(
>> - {
>> + while (1) {
>> len = s->ops->readlink(&s->ctx, path,
>> - buf->data, PATH_MAX - 1);
>> + buf->data, maxlen - 1);
>> + if (len == maxlen - 1) {
>> + g_free(buf->data);
>> + maxlen *= 2;
>> + buf->data = g_malloc(maxlen);
>> + continue;
>> + }
>> if (len > -1) {
>> buf->size = len;
>> buf->data[len] = 0;
> err = 0;
>> } else {
>> err = -errno;
>> }
>> + break;
>> });
>> v9fs_path_unlock(s);
>> if (err) {
>
> Harmless off-by-one: you double the buffer even when the link contents
> plus terminating null fits the buffer exactly (len == maxlen - 1).
>
> I prefer to have the exceptional stuff handled in conditionals, and not
> the normal stuff, like this:
>
> for (;;) {
> len = s->ops->readlink(&s->ctx, path, buf->data, maxlen);
> if (len < 0) {
> err = -errno;
> break;
> }
> if (len == maxlen) {
> g_free(buf->data);
> maxlen *= 2;
> buf->data = g_malloc(maxlen);
> continue;
> }
> buf->size = len;
> buf->data[len] = 0;
> err = 0;
> break;
> }
>
> Matter of taste.
>
That sounds good to me, after this patch pass checking, I will/should
send patch v2 for it.
> [...]
>
> I skimmed a few more hunks, and they look good to me. Leaving full
> review to Aneesh.
>
Thanks.
--
Chen Gang
Open, share, and attitude like air, water, and life which God blessed
next prev parent reply other threads:[~2014-03-03 10:52 UTC|newest]
Thread overview: 38+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-02-03 10:00 [Qemu-devel] [PATCH] hw/9pfs/virtio-9p-local.c: use snprintf() instead of sprintf() Chen Gang
2014-02-03 10:34 ` Daniel P. Berrange
2014-02-03 10:39 ` Chen Gang
2014-02-04 11:02 ` Chen Gang
2014-02-04 11:06 ` Daniel P. Berrange
2014-02-04 11:22 ` Chen Gang
2014-02-04 16:18 ` Aneesh Kumar K.V
2014-02-04 23:44 ` Chen Gang
2014-02-15 9:21 ` Chen Gang
2014-02-23 4:48 ` [Qemu-devel] [PATCH] hw/9pfs: use g_strdup_printf() instead of PATH_MAX limitation Chen Gang
2014-02-23 5:18 ` Chen Gang
2014-02-24 9:22 ` Markus Armbruster
2014-02-24 11:16 ` Gang Chen
2014-02-24 12:52 ` Markus Armbruster
2014-02-27 23:35 ` Chen Gang
2014-03-01 17:33 ` [Qemu-devel] [PATCH 0/3] hw/9pfs: fix 3 issues which related with path string Chen Gang
2014-03-01 17:34 ` [Qemu-devel] [PATCH 1/3] hw/9pfs/virtio-9p-local.c: move v9fs_string_free() to below "err_out:" Chen Gang
2014-03-01 17:35 ` [Qemu-devel] [PATCH 2/3] hw/9pfs/virtio-9p-local.c: use snprintf() instead of sprintf() Chen Gang
2014-03-01 17:36 ` [Qemu-devel] [PATCH 3/3] hw/9pfs: use g_strdup_printf() instead of PATH_MAX limitation Chen Gang
2014-03-03 8:34 ` Markus Armbruster
2014-03-03 10:51 ` Chen Gang [this message]
2014-03-03 16:22 ` Aneesh Kumar K.V
2014-03-03 19:29 ` Aneesh Kumar K.V
2014-03-04 0:27 ` Chen Gang
2014-03-03 8:34 ` [Qemu-devel] [PATCH 2/3] hw/9pfs/virtio-9p-local.c: use snprintf() instead of sprintf() Markus Armbruster
2014-03-03 10:54 ` Chen Gang
2014-03-03 14:42 ` Markus Armbruster
2014-03-04 0:38 ` Chen Gang
2014-03-03 15:33 ` Aneesh Kumar K.V
2014-03-03 15:33 ` Aneesh Kumar K.V
2014-03-03 15:29 ` [Qemu-devel] [PATCH 1/3] hw/9pfs/virtio-9p-local.c: move v9fs_string_free() to below "err_out:" Aneesh Kumar K.V
2014-03-04 0:11 ` Chen Gang
2014-03-03 17:43 ` [Qemu-devel] [PATCH 0/3] hw/9pfs: fix 3 issues which related with path string Eric Blake
2014-03-04 0:59 ` Chen Gang
2014-02-04 13:09 ` [Qemu-devel] [PATCH] hw/9pfs/virtio-9p-local.c: use snprintf() instead of sprintf() Eric Blake
2014-02-04 12:25 ` Markus Armbruster
2014-02-04 13:12 ` Eric Blake
2014-02-04 13:43 ` Chen Gang
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=53145EB2.9080106@gmail.com \
--to=gang.chen.5i5j@gmail.com \
--cc=aliguori@amazon.com \
--cc=aneesh.kumar@linux.vnet.ibm.com \
--cc=armbru@redhat.com \
--cc=qemu-devel@nongnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).