[PATCH 1/1] Fix null dereference in socket_recv_thread()
Zach Brown
zab at zabbo.net
Mon Apr 7 10:28:38 PDT 2025
On Fri, Mar 21, 2025 at 08:25:58AM -0500, Chris Kirby wrote:
> In socket_recv_thread(), don't try to iov_append() a NULL buffer.
> Compiler optimizations hide this bug for some versions of gcc.
> - iovcnt = iov_append(iov, iovcnt, page_address(mdesc.data_page), mdesc.data_size);
> +
> + if (mdesc.data_size)
> + iovcnt = iov_append(iov, iovcnt, page_address(mdesc.data_page), mdesc.data_size);
Thanks, applied.
- z
More information about the ngnfs-devel
mailing list