public inbox for glibc-bugs@sourceware.org
help / color / mirror / Atom feed
* [Bug libc/26639] New: msgctl IPC_INFO and MSG_INFO return garbage
@ 2020-09-20 15:08 ldv at sourceware dot org
2020-09-20 17:21 ` [Bug libc/26639] " ldv at sourceware dot org
` (3 more replies)
0 siblings, 4 replies; 5+ messages in thread
From: ldv at sourceware dot org @ 2020-09-20 15:08 UTC (permalink / raw)
To: glibc-bugs
https://sourceware.org/bugzilla/show_bug.cgi?id=26639
Bug ID: 26639
Summary: msgctl IPC_INFO and MSG_INFO return garbage
Product: glibc
Version: 2.32
Status: NEW
Severity: normal
Priority: P2
Component: libc
Assignee: unassigned at sourceware dot org
Reporter: ldv at sourceware dot org
CC: drepper.fsp at gmail dot com
Target Milestone: ---
Starting with commit glibc-2.31.9000-687-g3283f71113 aka glibc-2.32~83,
both IPC_INFO and MSG_INFO commands of msgctl return garbage because their
argument of type "struct msginfo" is converted using kmsqid64_to_msqid64.
This bug was found by strace test suite.
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 5+ messages in thread
* [Bug libc/26639] msgctl IPC_INFO and MSG_INFO return garbage
2020-09-20 15:08 [Bug libc/26639] New: msgctl IPC_INFO and MSG_INFO return garbage ldv at sourceware dot org
@ 2020-09-20 17:21 ` ldv at sourceware dot org
2020-09-20 17:35 ` ldv at sourceware dot org
` (2 subsequent siblings)
3 siblings, 0 replies; 5+ messages in thread
From: ldv at sourceware dot org @ 2020-09-20 17:21 UTC (permalink / raw)
To: glibc-bugs
https://sourceware.org/bugzilla/show_bug.cgi?id=26639
--- Comment #1 from Dmitry V. Levin <ldv at sourceware dot org> ---
(In reply to Dmitry V. Levin from comment #0)
> Starting with commit glibc-2.31.9000-687-g3283f71113 aka glibc-2.32~83,
> both IPC_INFO and MSG_INFO commands of msgctl return garbage because their
> argument of type "struct msginfo" is converted using kmsqid64_to_msqid64.
typo: it's msqid64_to_kmsqid64, not kmsqid64_to_msqid64.
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 5+ messages in thread
* [Bug libc/26639] msgctl IPC_INFO and MSG_INFO return garbage
2020-09-20 15:08 [Bug libc/26639] New: msgctl IPC_INFO and MSG_INFO return garbage ldv at sourceware dot org
2020-09-20 17:21 ` [Bug libc/26639] " ldv at sourceware dot org
@ 2020-09-20 17:35 ` ldv at sourceware dot org
2020-09-20 21:13 ` adhemerval.zanella at linaro dot org
2020-10-02 19:42 ` adhemerval.zanella at linaro dot org
3 siblings, 0 replies; 5+ messages in thread
From: ldv at sourceware dot org @ 2020-09-20 17:35 UTC (permalink / raw)
To: glibc-bugs
https://sourceware.org/bugzilla/show_bug.cgi?id=26639
--- Comment #2 from Dmitry V. Levin <ldv at sourceware dot org> ---
The bug is both in __msgctl64 and __msgctl: in case of IPC_INFO and MSG_INFO,
instead of the pointer specified by the user, a pointer to an internal buffer
on the stack is passed to the kernel. As result, the buffer specified by the
user remains unchanged after IPC_INFO and MSG_INFO commands.
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 5+ messages in thread
* [Bug libc/26639] msgctl IPC_INFO and MSG_INFO return garbage
2020-09-20 15:08 [Bug libc/26639] New: msgctl IPC_INFO and MSG_INFO return garbage ldv at sourceware dot org
2020-09-20 17:21 ` [Bug libc/26639] " ldv at sourceware dot org
2020-09-20 17:35 ` ldv at sourceware dot org
@ 2020-09-20 21:13 ` adhemerval.zanella at linaro dot org
2020-10-02 19:42 ` adhemerval.zanella at linaro dot org
3 siblings, 0 replies; 5+ messages in thread
From: adhemerval.zanella at linaro dot org @ 2020-09-20 21:13 UTC (permalink / raw)
To: glibc-bugs
https://sourceware.org/bugzilla/show_bug.cgi?id=26639
Adhemerval Zanella <adhemerval.zanella at linaro dot org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Assignee|unassigned at sourceware dot org |adhemerval.zanella at linaro dot o
| |rg
CC| |adhemerval.zanella at linaro dot o
| |rg
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 5+ messages in thread
* [Bug libc/26639] msgctl IPC_INFO and MSG_INFO return garbage
2020-09-20 15:08 [Bug libc/26639] New: msgctl IPC_INFO and MSG_INFO return garbage ldv at sourceware dot org
` (2 preceding siblings ...)
2020-09-20 21:13 ` adhemerval.zanella at linaro dot org
@ 2020-10-02 19:42 ` adhemerval.zanella at linaro dot org
3 siblings, 0 replies; 5+ messages in thread
From: adhemerval.zanella at linaro dot org @ 2020-10-02 19:42 UTC (permalink / raw)
To: glibc-bugs
https://sourceware.org/bugzilla/show_bug.cgi?id=26639
Adhemerval Zanella <adhemerval.zanella at linaro dot org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Target Milestone|--- |2.33
Resolution|--- |FIXED
Status|NEW |RESOLVED
--- Comment #3 from Adhemerval Zanella <adhemerval.zanella at linaro dot org> ---
Fixed on 2.33 (20a00dbefca5695cccaa44846a482db8ccdd85ab).
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2020-10-02 19:42 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-09-20 15:08 [Bug libc/26639] New: msgctl IPC_INFO and MSG_INFO return garbage ldv at sourceware dot org
2020-09-20 17:21 ` [Bug libc/26639] " ldv at sourceware dot org
2020-09-20 17:35 ` ldv at sourceware dot org
2020-09-20 21:13 ` adhemerval.zanella at linaro dot org
2020-10-02 19:42 ` adhemerval.zanella at linaro dot org
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).