提交 107d8412 编写于 作者: C c00546070 提交者: public tcshversion

TicketNo: DTS2020081206296

Description: validate null pointer for recvmsg
Team: OTHERS
Feature or Bugfix: Feature
Binary Source: NA
PrivateCode(Yes/No):No

Change-Id: I185b8293eabb2ec0ba5f27a3fb90445c75c6f7c5
Reviewed-on: http://mgit-tm.rnd.huawei.com/10285435Tested-by: Npublic jenkins <public_jenkins@notesmail.huawei.com>
Reviewed-by: Njianghan 00316535 <jianghan2@huawei.com>
Reviewed-by: Nshenwei 00579521 <denny.shenwei@huawei.com>
上级 ad773ed1
...@@ -3,6 +3,7 @@ ...@@ -3,6 +3,7 @@
#include <time.h> #include <time.h>
#include <sys/time.h> #include <sys/time.h>
#include <string.h> #include <string.h>
#include <errno.h>
#include "syscall.h" #include "syscall.h"
hidden void __convert_scm_timestamps(struct msghdr *, socklen_t); hidden void __convert_scm_timestamps(struct msghdr *, socklen_t);
...@@ -50,6 +51,10 @@ void __convert_scm_timestamps(struct msghdr *msg, socklen_t csize) ...@@ -50,6 +51,10 @@ void __convert_scm_timestamps(struct msghdr *msg, socklen_t csize)
ssize_t recvmsg(int fd, struct msghdr *msg, int flags) ssize_t recvmsg(int fd, struct msghdr *msg, int flags)
{ {
ssize_t r; ssize_t r;
if (!msg) {
errno = EFAULT;
return -1;
}
socklen_t orig_controllen = msg->msg_controllen; socklen_t orig_controllen = msg->msg_controllen;
#if LONG_MAX > INT_MAX #if LONG_MAX > INT_MAX
struct msghdr h, *orig = msg; struct msghdr h, *orig = msg;
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册