diff options
| author | Roland McGrath <roland@gnu.org> | 2008-07-21 19:50:36 +0000 |
|---|---|---|
| committer | Roland McGrath <roland@gnu.org> | 2008-07-21 19:50:36 +0000 |
| commit | 2e806440f9c41db2a9aa3c7d6f1270a449c63af7 (patch) | |
| tree | 0f134b1f8ffae8b4850c19670e67cc0ad6f812b9 /hurd | |
| parent | 2e79213a366ad807b054ca167266ed4827303836 (diff) | |
| download | glibc-2e806440f9c41db2a9aa3c7d6f1270a449c63af7.tar.gz | |
2008-07-21 Roland McGrath <roland@frob.com>
* hurd/fd-read.c (_hurd_fd_read): Return EGRATUITOUS if the server
returned too much data out of line.
Diffstat (limited to 'hurd')
| -rw-r--r-- | hurd/fd-read.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/hurd/fd-read.c b/hurd/fd-read.c index 388a4dbaf9..d673c78e03 100644 --- a/hurd/fd-read.c +++ b/hurd/fd-read.c @@ -1,4 +1,4 @@ -/* Copyright (C) 1993,94,95,97,99,2002 Free Software Foundation, Inc. +/* Copyright (C) 1993,94,95,97,99,2002,2008 Free Software Foundation, Inc. This file is part of the GNU C Library. The GNU C Library is free software; you can redistribute it and/or @@ -41,6 +41,8 @@ _hurd_fd_read (struct hurd_fd *fd, void *buf, size_t *nbytes, loff_t offset) if (data != buf) { + if (nread > *nbytes) /* Sanity check for bogus server. */ + return EGRATUITOUS; memcpy (buf, data, nread); __vm_deallocate (__mach_task_self (), (vm_address_t) data, nread); } |