[PATCH makedumpfile] Fix array index out of bound exception
lijiang
lijiang at redhat.com
Tue Mar 6 17:25:01 PST 2018
Also cc Masaki/Masahiko/piliu.
Thanks.
Lianbo
在 2018年03月06日 18:07, Lianbo Jiang 写道:
> A data overflow may lead to a reversal, which may turn a positive
> number into a large negative number, in this case, the string's
> length will exceed the array size(for example, eta: -2147483648s),
> here the array size is defined 16 characters. So, it is nessasary
> to consider some exceptions.
>
> Signed-off-by: Lianbo Jiang <lijiang at redhat.com>
> ---
> print_info.c | 21 +++++++++++++--------
> 1 file changed, 13 insertions(+), 8 deletions(-)
>
> diff --git a/print_info.c b/print_info.c
> index e0e6a27..09e215a 100644
> --- a/print_info.c
> +++ b/print_info.c
> @@ -16,6 +16,8 @@
> #include "print_info.h"
> #include <time.h>
> #include <string.h>
> +#include <stdint.h>
> +#include <inttypes.h>
>
> #define PROGRESS_MAXLEN "50"
>
> @@ -352,18 +354,21 @@ static void calc_delta(struct timeval *tv_start, struct timeval *delta)
> }
>
> /* produce less than 12 bytes on msg */
> -static int eta_to_human_short (int secs, char* msg)
> +static int eta_to_human_short (int64_t secs, char* msg, int maxsize)
> {
> strcpy(msg, "eta: ");
> msg += strlen("eta: ");
> if (secs < 100)
> - sprintf(msg, "%ds", secs);
> + snprintf(msg, maxsize, "%"PRId64"s", secs);
> else if (secs < 100 * 60)
> - sprintf(msg, "%dm%ds", secs / 60, secs % 60);
> + snprintf(msg, maxsize, "%"PRId64"m""%"PRId64"s",
> + secs / 60, secs % 60);
> else if (secs < 48 * 3600)
> - sprintf(msg, "%dh%dm", secs / 3600, (secs / 60) % 60);
> + snprintf(msg, maxsize, "%"PRId64"h""%"PRId64"m",
> + secs / 3600, (secs / 60) % 60);
> else if (secs < 100 * 86400)
> - sprintf(msg, "%dd%dh", secs / 86400, (secs / 3600) % 24);
> + snprintf(msg, maxsize, "%"PRId64"d""%"PRId64"h",
> + secs / 86400, (secs / 3600) % 24);
> else
> sprintf(msg, ">2day");
> return 0;
> @@ -379,8 +384,8 @@ print_progress(const char *msg, unsigned long current, unsigned long end, struct
> static unsigned int lapse = 0;
> static const char *spinner = "/|\\-";
> struct timeval delta;
> - double eta;
> - char eta_msg[16] = " ";
> + int64_t eta;
> + char eta_msg[32] = " ";
>
> if (current < end) {
> tm = time(NULL);
> @@ -395,7 +400,7 @@ print_progress(const char *msg, unsigned long current, unsigned long end, struct
> calc_delta(start, &delta);
> eta = delta.tv_sec + delta.tv_usec / 1e6;
> eta = (100 - progress) * eta / progress;
> - eta_to_human_short(eta, eta_msg);
> + eta_to_human_short(eta, eta_msg, sizeof(eta_msg));
> }
> if (flag_ignore_r_char) {
> PROGRESS_MSG("%-" PROGRESS_MAXLEN "s: [%5.1f %%] %c %16s\n",
>
More information about the kexec
mailing list