提交 10932015 编写于 作者: D Daniel P. Berrange

virconf: clarify type range checks for integers

The virConf 'l' field is a 'signed long long', so whenever
the 'type' field is VIR_CONF_ULONG, we should explicitly cast
'l' to a 'unsigned long long' before doing range checks.
Signed-off-by: NDaniel P. Berrange <berrange@redhat.com>
上级 b7caf4fc
...@@ -1208,21 +1208,28 @@ int virConfGetValueSizeT(virConfPtr conf, ...@@ -1208,21 +1208,28 @@ int virConfGetValueSizeT(virConfPtr conf,
if (!cval) if (!cval)
return 0; return 0;
if (cval->type != VIR_CONF_ULONG) { if (cval->type == VIR_CONF_LONG) {
if (cval->l < 0 || cval->l > SIZE_MAX) {
virReportError(VIR_ERR_INTERNAL_ERROR,
_("%s: value for '%s' parameter must be in range 0:%zu"),
conf->filename, setting, SIZE_MAX);
return -1;
}
} else if (cval->type == VIR_CONF_ULONG) {
if (((unsigned long long)cval->l) > SIZE_MAX) {
virReportError(VIR_ERR_INTERNAL_ERROR,
_("%s: value for '%s' parameter must be in range 0:%zu"),
conf->filename, setting, SIZE_MAX);
return -1;
}
} else {
virReportError(VIR_ERR_INTERNAL_ERROR, virReportError(VIR_ERR_INTERNAL_ERROR,
_("%s: expected an unsigned integer for '%s' parameter"), _("%s: expected an unsigned integer for '%s' parameter"),
conf->filename, setting); conf->filename, setting);
return -1; return -1;
} }
if (cval->l > SIZE_MAX || cval->l < 0) { *value = (size_t)cval->l;
virReportError(VIR_ERR_INTERNAL_ERROR,
_("%s: value for '%s' parameter must be in range 0:%zu"),
conf->filename, setting, SIZE_MAX);
return -1;
}
*value = cval->l;
return 1; return 1;
} }
...@@ -1256,23 +1263,28 @@ int virConfGetValueSSizeT(virConfPtr conf, ...@@ -1256,23 +1263,28 @@ int virConfGetValueSSizeT(virConfPtr conf,
if (!cval) if (!cval)
return 0; return 0;
if (cval->type != VIR_CONF_LONG && if (cval->type == VIR_CONF_ULONG) {
cval->type != VIR_CONF_ULONG) { if (((unsigned long long)cval->l) > SSIZE_MAX) {
virReportError(VIR_ERR_INTERNAL_ERROR,
_("%s: value for '%s' parameter must be in range %zd:%zd"),
conf->filename, setting, (ssize_t)-SSIZE_MAX - 1, (ssize_t)SSIZE_MAX);
return -1;
}
} else if (cval->type == VIR_CONF_LONG) {
if (cval->l < (-SSIZE_MAX - 1) || cval->l > SSIZE_MAX) {
virReportError(VIR_ERR_INTERNAL_ERROR,
_("%s: value for '%s' parameter must be in range %zd:%zd"),
conf->filename, setting, (ssize_t)-SSIZE_MAX - 1, (ssize_t)SSIZE_MAX);
return -1;
}
} else {
virReportError(VIR_ERR_INTERNAL_ERROR, virReportError(VIR_ERR_INTERNAL_ERROR,
_("%s: expected a signed integer for '%s' parameter"), _("%s: expected a signed integer for '%s' parameter"),
conf->filename, setting); conf->filename, setting);
return -1; return -1;
} }
if (cval->l > SSIZE_MAX || cval->l < (-SSIZE_MAX - 1)) { *value = (ssize_t)cval->l;
virReportError(VIR_ERR_INTERNAL_ERROR,
_("%s: value for '%s' parameter must be in range %zd:%zd"),
conf->filename, setting,
(ssize_t) -SSIZE_MAX - 1, (ssize_t) SSIZE_MAX);
return -1;
}
*value = cval->l;
return 1; return 1;
} }
...@@ -1306,22 +1318,20 @@ int virConfGetValueLLong(virConfPtr conf, ...@@ -1306,22 +1318,20 @@ int virConfGetValueLLong(virConfPtr conf,
if (!cval) if (!cval)
return 0; return 0;
if (cval->type != VIR_CONF_LONG && if (cval->type == VIR_CONF_ULONG) {
cval->type != VIR_CONF_ULONG) { if (((unsigned long long)cval->l) > LLONG_MAX) {
virReportError(VIR_ERR_INTERNAL_ERROR,
_("%s: value for '%s' parameter must be in range 0:%lld"),
conf->filename, setting, LLONG_MAX);
return -1;
}
} else if (cval->type != VIR_CONF_LONG) {
virReportError(VIR_ERR_INTERNAL_ERROR, virReportError(VIR_ERR_INTERNAL_ERROR,
_("%s: expected a signed integer for '%s' parameter"), _("%s: expected a signed integer for '%s' parameter"),
conf->filename, setting); conf->filename, setting);
return -1; return -1;
} }
if (cval->type == VIR_CONF_ULONG &&
cval->l > LLONG_MAX) {
virReportError(VIR_ERR_INTERNAL_ERROR,
_("%s: value for '%s' parameter must be in range 0:%lld"),
conf->filename, setting, LLONG_MAX);
return -1;
}
*value = cval->l; *value = cval->l;
return 1; return 1;
...@@ -1355,15 +1365,21 @@ int virConfGetValueULLong(virConfPtr conf, ...@@ -1355,15 +1365,21 @@ int virConfGetValueULLong(virConfPtr conf,
if (!cval) if (!cval)
return 0; return 0;
if (cval->type != VIR_CONF_LONG && if (cval->type == VIR_CONF_LONG) {
cval->type != VIR_CONF_ULONG) { if (cval->l < 0) {
virReportError(VIR_ERR_INTERNAL_ERROR,
_("%s: value for '%s' parameter must be in range 0:%llu"),
conf->filename, setting, ULLONG_MAX);
return -1;
}
} else if (cval->type != VIR_CONF_ULONG) {
virReportError(VIR_ERR_INTERNAL_ERROR, virReportError(VIR_ERR_INTERNAL_ERROR,
_("%s: expected an unsigned integer for '%s' parameter"), _("%s: expected an unsigned integer for '%s' parameter"),
conf->filename, setting); conf->filename, setting);
return -1; return -1;
} }
*value = cval->l; *value = (unsigned long long)cval->l;
return 1; return 1;
} }
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册