Test the value of msg_controllen for platforms whose CMSG_FIRSTHDR() does not test it for us
As RFC 2292 points out, some platforms (e.g. Darwin 9.8.0) provide CMSG_FIRSTHDR(msg) which just returns msg.msg_control without first checking if msg.msg_controllen is non-zero. We need a workaround for such platforms not to let _xcb_in_read() segfault. https://bugs.freedesktop.org/show_bug.cgi?id=72253 Signed-off-by: Julien Cristau <jcristau@debian.org>
This commit is contained in:
parent
b30b11ac49
commit
a1299eb2a2
|
@ -918,6 +918,7 @@ int _xcb_in_read(xcb_connection_t *c)
|
|||
#if HAVE_SENDMSG
|
||||
struct cmsghdr *hdr;
|
||||
|
||||
if (msg.msg_controllen >= sizeof (struct cmsghdr)) {
|
||||
for (hdr = CMSG_FIRSTHDR(&msg); hdr; hdr = CMSG_NXTHDR(&msg, hdr)) {
|
||||
if (hdr->cmsg_level == SOL_SOCKET && hdr->cmsg_type == SCM_RIGHTS) {
|
||||
int nfd = (hdr->cmsg_len - CMSG_LEN(0)) / sizeof (int);
|
||||
|
@ -925,6 +926,7 @@ int _xcb_in_read(xcb_connection_t *c)
|
|||
c->in.in_fd.nfd += nfd;
|
||||
}
|
||||
}
|
||||
}
|
||||
#endif
|
||||
c->in.queue_len += n;
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue