public inbox for glibc-bugs@sourceware.org help / color / mirror / Atom feed
* [Bug libc/26639] New: msgctl IPC_INFO and MSG_INFO return garbage
@ 2020-09-20 15:08 ldv at sourceware dot org
2020-09-20 17:21 ` [Bug libc/26639] " ldv at sourceware dot org
` (3 more replies)
0 siblings, 4 replies; 5+ messages in thread
From: ldv at sourceware dot org @ 2020-09-20 15:08 UTC (permalink / raw)
To: glibc-bugs
https://sourceware.org/bugzilla/show_bug.cgi?id=26639
Bug ID: 26639
Summary: msgctl IPC_INFO and MSG_INFO return garbage
Product: glibc
Version: 2.32
Status: NEW
Severity: normal
Priority: P2
Component: libc
Assignee: unassigned at sourceware dot org
Reporter: ldv at sourceware dot org
CC: drepper.fsp at gmail dot com
Target Milestone: ---
Starting with commit glibc-2.31.9000-687-g3283f71113 aka glibc-2.32~83,
both IPC_INFO and MSG_INFO commands of msgctl return garbage because their
argument of type "struct msginfo" is converted using kmsqid64_to_msqid64.
This bug was found by strace test suite.
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 5+ messages in thread* [Bug libc/26639] msgctl IPC_INFO and MSG_INFO return garbage 2020-09-20 15:08 [Bug libc/26639] New: msgctl IPC_INFO and MSG_INFO return garbage ldv at sourceware dot org @ 2020-09-20 17:21 ` ldv at sourceware dot org 2020-09-20 17:35 ` ldv at sourceware dot org ` (2 subsequent siblings) 3 siblings, 0 replies; 5+ messages in thread From: ldv at sourceware dot org @ 2020-09-20 17:21 UTC (permalink / raw) To: glibc-bugs https://sourceware.org/bugzilla/show_bug.cgi?id=26639 --- Comment #1 from Dmitry V. Levin <ldv at sourceware dot org> --- (In reply to Dmitry V. Levin from comment #0) > Starting with commit glibc-2.31.9000-687-g3283f71113 aka glibc-2.32~83, > both IPC_INFO and MSG_INFO commands of msgctl return garbage because their > argument of type "struct msginfo" is converted using kmsqid64_to_msqid64. typo: it's msqid64_to_kmsqid64, not kmsqid64_to_msqid64. -- You are receiving this mail because: You are on the CC list for the bug. ^ permalink raw reply [flat|nested] 5+ messages in thread
* [Bug libc/26639] msgctl IPC_INFO and MSG_INFO return garbage 2020-09-20 15:08 [Bug libc/26639] New: msgctl IPC_INFO and MSG_INFO return garbage ldv at sourceware dot org 2020-09-20 17:21 ` [Bug libc/26639] " ldv at sourceware dot org @ 2020-09-20 17:35 ` ldv at sourceware dot org 2020-09-20 21:13 ` adhemerval.zanella at linaro dot org 2020-10-02 19:42 ` adhemerval.zanella at linaro dot org 3 siblings, 0 replies; 5+ messages in thread From: ldv at sourceware dot org @ 2020-09-20 17:35 UTC (permalink / raw) To: glibc-bugs https://sourceware.org/bugzilla/show_bug.cgi?id=26639 --- Comment #2 from Dmitry V. Levin <ldv at sourceware dot org> --- The bug is both in __msgctl64 and __msgctl: in case of IPC_INFO and MSG_INFO, instead of the pointer specified by the user, a pointer to an internal buffer on the stack is passed to the kernel. As result, the buffer specified by the user remains unchanged after IPC_INFO and MSG_INFO commands. -- You are receiving this mail because: You are on the CC list for the bug. ^ permalink raw reply [flat|nested] 5+ messages in thread
* [Bug libc/26639] msgctl IPC_INFO and MSG_INFO return garbage 2020-09-20 15:08 [Bug libc/26639] New: msgctl IPC_INFO and MSG_INFO return garbage ldv at sourceware dot org 2020-09-20 17:21 ` [Bug libc/26639] " ldv at sourceware dot org 2020-09-20 17:35 ` ldv at sourceware dot org @ 2020-09-20 21:13 ` adhemerval.zanella at linaro dot org 2020-10-02 19:42 ` adhemerval.zanella at linaro dot org 3 siblings, 0 replies; 5+ messages in thread From: adhemerval.zanella at linaro dot org @ 2020-09-20 21:13 UTC (permalink / raw) To: glibc-bugs https://sourceware.org/bugzilla/show_bug.cgi?id=26639 Adhemerval Zanella <adhemerval.zanella at linaro dot org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|unassigned at sourceware dot org |adhemerval.zanella at linaro dot o | |rg CC| |adhemerval.zanella at linaro dot o | |rg -- You are receiving this mail because: You are on the CC list for the bug. ^ permalink raw reply [flat|nested] 5+ messages in thread
* [Bug libc/26639] msgctl IPC_INFO and MSG_INFO return garbage 2020-09-20 15:08 [Bug libc/26639] New: msgctl IPC_INFO and MSG_INFO return garbage ldv at sourceware dot org ` (2 preceding siblings ...) 2020-09-20 21:13 ` adhemerval.zanella at linaro dot org @ 2020-10-02 19:42 ` adhemerval.zanella at linaro dot org 3 siblings, 0 replies; 5+ messages in thread From: adhemerval.zanella at linaro dot org @ 2020-10-02 19:42 UTC (permalink / raw) To: glibc-bugs https://sourceware.org/bugzilla/show_bug.cgi?id=26639 Adhemerval Zanella <adhemerval.zanella at linaro dot org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |2.33 Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #3 from Adhemerval Zanella <adhemerval.zanella at linaro dot org> --- Fixed on 2.33 (20a00dbefca5695cccaa44846a482db8ccdd85ab). -- You are receiving this mail because: You are on the CC list for the bug. ^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2020-10-02 19:42 UTC | newest] Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed) -- links below jump to the message on this page -- 2020-09-20 15:08 [Bug libc/26639] New: msgctl IPC_INFO and MSG_INFO return garbage ldv at sourceware dot org 2020-09-20 17:21 ` [Bug libc/26639] " ldv at sourceware dot org 2020-09-20 17:35 ` ldv at sourceware dot org 2020-09-20 21:13 ` adhemerval.zanella at linaro dot org 2020-10-02 19:42 ` adhemerval.zanella at linaro dot org
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).