diff options
author | Volker Lendecke <vl@samba.org> | 2009-05-10 10:49:18 +0200 |
---|---|---|
committer | Karolin Seeger <kseeger@samba.org> | 2011-04-14 21:02:36 +0200 |
commit | 7a801a842c7c6636c654489cb53bb8271c6927c8 (patch) | |
tree | 69ac20e32487ada65a61590c26a656bd8ea206bc | |
parent | 22b100f3ed9dcc7bb4c1ba142e17a936d54159fa (diff) | |
download | samba-7a801a842c7c6636c654489cb53bb8271c6927c8.tar.gz |
Allow NULL queue to writev_send
Fix bug #8086 - null pointer reference crashes winbind.
-rw-r--r-- | lib/async_req/async_sock.c | 22 |
1 files changed, 16 insertions, 6 deletions
diff --git a/lib/async_req/async_sock.c b/lib/async_req/async_sock.c index 39705f45bb2..c428e3c6632 100644 --- a/lib/async_req/async_sock.c +++ b/lib/async_req/async_sock.c @@ -387,11 +387,11 @@ struct tevent_req *writev_send(TALLOC_CTX *mem_ctx, struct tevent_context *ev, struct tevent_queue *queue, int fd, struct iovec *iov, int count) { - struct tevent_req *result; + struct tevent_req *req; struct writev_state *state; - result = tevent_req_create(mem_ctx, &state, struct writev_state); - if (result == NULL) { + req = tevent_req_create(mem_ctx, &state, struct writev_state); + if (req == NULL) { return NULL; } state->ev = ev; @@ -404,12 +404,22 @@ struct tevent_req *writev_send(TALLOC_CTX *mem_ctx, struct tevent_context *ev, goto fail; } - if (!tevent_queue_add(queue, ev, result, writev_trigger, NULL)) { + if (queue == NULL) { + struct tevent_fd *fde; + fde = tevent_add_fd(state->ev, state, state->fd, + TEVENT_FD_WRITE, writev_handler, req); + if (tevent_req_nomem(fde, req)) { + return tevent_req_post(req, ev); + } + return req; + } + + if (!tevent_queue_add(queue, ev, req, writev_trigger, NULL)) { goto fail; } - return result; + return req; fail: - TALLOC_FREE(result); + TALLOC_FREE(req); return NULL; } |