@@ -326,7 +326,7 @@ int tracecmd_msg_wait_close(struct tracecmd_msg_handle *msg_handle);
/* for server */
int tracecmd_msg_initial_setting(struct tracecmd_msg_handle *msg_handle);
int tracecmd_msg_send_port_array(struct tracecmd_msg_handle *msg_handle,
- int *ports);
+ unsigned *ports);
int tracecmd_msg_read_data(struct tracecmd_msg_handle *msg_handle, int ofd);
int tracecmd_msg_collect_data(struct tracecmd_msg_handle *msg_handle, int ofd);
bool tracecmd_msg_done(struct tracecmd_msg_handle *msg_handle);
@@ -517,10 +517,10 @@ static int *create_all_readers(const char *node, const char *port,
{
int use_tcp = msg_handle->flags & TRACECMD_MSG_FL_USE_TCP;
char buf[BUFSIZ];
- int *port_array;
+ unsigned int *port_array;
int *pid_array;
- int start_port;
- int udp_port;
+ unsigned int start_port;
+ unsigned int udp_port;
int cpus = msg_handle->cpu_count;
int cpu;
int pid;
@@ -528,11 +528,11 @@ static int *create_all_readers(const char *node, const char *port,
if (!pagesize)
return NULL;
- port_array = malloc(sizeof(int) * cpus);
+ port_array = malloc(sizeof(*port_array) * cpus);
if (!port_array)
return NULL;
- pid_array = malloc(sizeof(int) * cpus);
+ pid_array = malloc(sizeof(*pid_array) * cpus);
if (!pid_array) {
free(port_array);
return NULL;
@@ -161,12 +161,26 @@ static int make_tinit(struct tracecmd_msg_handle *msg_handle,
return 0;
}
-static int write_ints(char *buf, size_t buf_len, int *arr, int arr_len)
+/* test a to u */
+static int tatou(const char *s, unsigned int *res)
+{
+ long r;
+
+ r = atol(s);
+ if (r >= 0 && r <= UINT_MAX) {
+ *res = (unsigned int)r;
+ return 0;
+ }
+ return -1;
+}
+
+static int write_uints(char *buf, size_t buf_len,
+ unsigned int *arr, int arr_len)
{
int i, ret, tot = 0;
for (i = 0; i < arr_len; i++) {
- ret = snprintf(buf, buf_len, "%d", arr[i]);
+ ret = snprintf(buf, buf_len, "%u", arr[i]);
if (ret < 0)
return ret;
@@ -184,15 +198,15 @@ static int write_ints(char *buf, size_t buf_len, int *arr, int arr_len)
return tot;
}
-static int make_rinit(struct tracecmd_msg *msg, int cpus, int *ports)
+static int make_rinit(struct tracecmd_msg *msg, int cpus, unsigned int *ports)
{
int data_size;
- data_size = write_ints(NULL, 0, ports, cpus);
+ data_size = write_uints(NULL, 0, ports, cpus);
msg->buf = malloc(data_size);
if (!msg->buf)
return -ENOMEM;
- write_ints(msg->buf, data_size, ports, cpus);
+ write_uints(msg->buf, data_size, ports, cpus);
msg->rinit.cpus = htonl(cpus);
msg->hdr.size = htonl(ntohl(msg->hdr.size) + data_size);
@@ -442,7 +456,7 @@ int tracecmd_msg_send_init_data(struct tracecmd_msg_handle *msg_handle,
}
cpus = ntohl(msg.rinit.cpus);
- ports = malloc_or_die(sizeof(*ports) * cpus);
+ ports = malloc(sizeof(*ports) * cpus);
if (!ports) {
ret = -ENOMEM;
goto out;
@@ -450,13 +464,11 @@ int tracecmd_msg_send_init_data(struct tracecmd_msg_handle *msg_handle,
buf_end = msg.buf + buf_len;
for (i = 0, p = msg.buf; i < cpus; i++, p++) {
- if (p >= buf_end) {
+ if (p >= buf_end || tatou(p, &ports[i])) {
free(ports);
ret = -EINVAL;
goto error;
}
-
- ports[i] = atoi(p);
p = strchr(p, '\0');
}
@@ -588,7 +600,7 @@ error:
}
int tracecmd_msg_send_port_array(struct tracecmd_msg_handle *msg_handle,
- int *ports)
+ unsigned int *ports)
{
struct tracecmd_msg msg;
int ret;
Switch ports data type to unsigned int since vsocket ports are 32 bit unsigned integers and sometimes cause overflow when stored in int variables. Signed-off-by: Slavomir Kaslev <kaslevs@vmware.com> --- include/trace-cmd/trace-cmd.h | 2 +- tracecmd/trace-listen.c | 10 +++++----- tracecmd/trace-msg.c | 32 ++++++++++++++++++++++---------- 3 files changed, 28 insertions(+), 16 deletions(-)