/* * netsniff-ng - the packet sniffing beast * Copyright 2009, 2010 Daniel Borkmann. * Subject to the GPL, version 2. */ #include #include #include #include #include "str.h" #include "die.h" #include "xmalloc.h" size_t strlcpy(char *dest, const char *src, size_t size) { size_t ret = strlen(src); if (size) { size_t len = (ret >= size) ? size - 1 : ret; memcpy(dest, src, len); dest[len] = '\0'; } return ret; } static inline int vslprintf(char *dst, size_t size, const char *fmt, va_list ap) { int ret; ret = vsnprintf(dst, size, fmt, ap); dst[size - 1] = '\0'; return ret; } int slprintf(char *dst, size_t size, const char *fmt, ...) { int ret; va_list ap; va_start(ap, fmt); ret = vslprintf(dst, size, fmt, ap); va_end(ap); return ret; } int slprintf_nocheck(char *dst, size_t size, const char *fmt, ...) { int ret; va_list ap; va_start(ap, fmt); ret = vslprintf(dst, size, fmt, ap); va_end(ap); return ret; } noinline void *xmemset(void *s, int c, size_t n) { size_t i; uint8_t *ptr = s; for (i = 0; i < n; ++i) ptr[i] = (uint8_t) c; return ptr; } char *strtrim_right(char *p, char c) { char *end; size_t len; len = strlen(p); while (*p && len) { end = p + len - 1; if (c == *end) *end = 0; else break; len = strlen(p); } return p; } char *argv2str(int startind, int argc, char **argv) { off_t offset = 0; char *str = NULL; int ret, i; for (i = startind; i < argc; ++i) { size_t tlen = (i < argc - 1) ? 2 : 1; size_t alen = strlen(argv[i]) + tlen; size_t slen = str ? strlen(str) : 0; str = xrealloc(str, slen + alen); ret = slprintf(str + offset, strlen(argv[i]) + tlen, "%s%s", argv[i], tlen == 2 ? " " : ""); if (ret < 0) panic("Cannot concatenate string!\n"); else offset += ret; } return str; } char **argv_insert(char **argv, size_t *count, const char *str) { argv = xrealloc(argv, (*count + 2) * sizeof(char *)); argv[*count] = str ? xstrdup(str) : xstrdup(""); argv[*count + 1] = NULL; *count += 1; return argv; } void argv_free(char **argv) { char **tmp = argv; for (; argv && *argv; argv++) free(*argv); free(tmp); } int str2mac(const char *str, uint8_t *mac, size_t len) { int i, count; unsigned int tmp[6]; if (!str) return -EINVAL; if (len < 6) return -ENOSPC; count = sscanf(str, "%02X:%02X:%02X:%02X:%02X:%02X", &tmp[0], &tmp[1], &tmp[2], &tmp[3], &tmp[4], &tmp[5]); if (errno || count != 6) count = sscanf(str, "%02x:%02x:%02x:%02x:%02x:%02x", &tmp[0], &tmp[1], &tmp[2], &tmp[3], &tmp[4], &tmp[5]); if (count != 6) return -EINVAL; if (errno) return -errno; for (i = 0; i < 6; i++) mac[i] = (uint8_t)tmp[i]; return 0; } char *str2fqdn(const char *str) { size_t slen = strlen(str); size_t flen = 0; char *fqdn; char *tmp; char *dup; int i = 0; int c = 0; dup = xstrdup(str); tmp = dup; fqdn = xzmalloc(slen + 2); while (tmp <= dup + slen && c++ <= slen) { if (tmp[i] == '.' || tmp[i] == '\0') { size_t dlen; tmp[i] = '\0'; dlen = strlen(tmp); fqdn[flen] = dlen; memcpy(&fqdn[flen + 1], tmp, dlen); flen += dlen + 1; tmp += dlen + 1; i = 0; continue; } i++; } xfree(dup); return fqdn; } ock/r8a73a4-clock.h

diff options

author	Dan Carpenter <dan.carpenter@oracle.com>	2017-01-30 10:55:04 +0100
committer	David S. Miller <davem@davemloft.net>	2017-01-30 16:37:55 -0500
commit	cdaf25dfc058ee6f7a7b2e2353de00fa288c0cd4 (patch)
tree	a45096fd9e8aaeea2eac1f1999a3d17dfeb0d02b /include/dt-bindings/clock/r8a73a4-clock.h
parent	1930b60352e7e195f55b27cde15d2a8f43342a8b (diff)

smc: some potential use after free bugs

Say we got really unlucky and these failed on the last iteration, then it could lead to a use after free bug. Fixes: cd6851f30386 ("smc: remote memory buffers (RMBs)") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Ursula Braun <ubraun@linux.vnet.ibm.com> Signed-off-by: David S. Miller <davem@davemloft.net>

Diffstat (limited to 'include/dt-bindings/clock/r8a73a4-clock.h')


context:
space:
mode: