[PATCH 1/1] Fix null dereference in socket_recv_thread()

Zach Brown zab at zabbo.net
Mon Apr 7 10:28:38 PDT 2025


On Fri, Mar 21, 2025 at 08:25:58AM -0500, Chris Kirby wrote:
> In socket_recv_thread(), don't try to iov_append() a NULL buffer.
> Compiler optimizations hide this bug for some versions of gcc.

> -		iovcnt = iov_append(iov, iovcnt, page_address(mdesc.data_page), mdesc.data_size);
> +
> +		if (mdesc.data_size)
> +			iovcnt = iov_append(iov, iovcnt, page_address(mdesc.data_page), mdesc.data_size);

Thanks, applied.

- z 



More information about the ngnfs-devel mailing list