netdev
[Top] [All Lists]

Re: Off-by-one bug at unix_mkname ?

To: jengelh@xxxxxxxxxxxxxxx
Subject: Re: Off-by-one bug at unix_mkname ?
From: YOSHIFUJI Hideaki / 吉藤英明 <yoshfuji@xxxxxxxxxxxxxx>
Date: Mon, 28 Mar 2005 18:33:31 +0900 (JST)
Cc: davem@xxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx, netdev@xxxxxxxxxxx, from-linux-kernel@xxxxxxxxxxxxxxxxxxx, yoshfuji@xxxxxxxxxxxxxx
In-reply-to: <Pine.LNX.4.61.0503281124450.18443@xxxxxxxxxxxxxxx>
Organization: USAGI Project
References: <20050328.172108.30349253.yoshfuji@xxxxxxxxxxxxxx> <20050328.173938.26746686.yoshfuji@xxxxxxxxxxxxxx> <Pine.LNX.4.61.0503281124450.18443@xxxxxxxxxxxxxxx>
Sender: netdev-bounce@xxxxxxxxxxx
In article <Pine.LNX.4.61.0503281124450.18443@xxxxxxxxxxxxxxx> (at Mon, 28 Mar 
2005 11:25:39 +0200 (MEST)), Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx> says:

> 
> On Mar 28 2005 17:39, YOSHIFUJI Hideaki / 吉藤英明 wrote:
> 
> >+             *      This may look like an off by one error but it is
> >+             *      a bit more subtle. 108 is the longest valid AF_UNIX
> >+             *      path for a binding. sun_path[108] doesnt as such
> >+             *      exist. However in kernel space we are guaranteed that
> >+             *      it is a valid memory location in our kernel
> >+             *      address buffer.
> >+             */
> 
> Now, does 2.6. _still_ guarantee that 108 is a valid offset?

Yes, it does.

--yoshfuji

<Prev in Thread] Current Thread [Next in Thread>