summaryrefslogtreecommitdiff
path: root/hurd
diff options
context:
space:
mode:
authorRoland McGrath <roland@gnu.org>2008-07-21 19:50:36 +0000
committerRoland McGrath <roland@gnu.org>2008-07-21 19:50:36 +0000
commit2e806440f9c41db2a9aa3c7d6f1270a449c63af7 (patch)
tree0f134b1f8ffae8b4850c19670e67cc0ad6f812b9 /hurd
parent2e79213a366ad807b054ca167266ed4827303836 (diff)
2008-07-21 Roland McGrath <roland@frob.com>
* hurd/fd-read.c (_hurd_fd_read): Return EGRATUITOUS if the server returned too much data out of line.
Diffstat (limited to 'hurd')
-rw-r--r--hurd/fd-read.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/hurd/fd-read.c b/hurd/fd-read.c
index 388a4dbaf9..d673c78e03 100644
--- a/hurd/fd-read.c
+++ b/hurd/fd-read.c
@@ -1,4 +1,4 @@
-/* Copyright (C) 1993,94,95,97,99,2002 Free Software Foundation, Inc.
+/* Copyright (C) 1993,94,95,97,99,2002,2008 Free Software Foundation, Inc.
This file is part of the GNU C Library.
The GNU C Library is free software; you can redistribute it and/or
@@ -41,6 +41,8 @@ _hurd_fd_read (struct hurd_fd *fd, void *buf, size_t *nbytes, loff_t offset)
if (data != buf)
{
+ if (nread > *nbytes) /* Sanity check for bogus server. */
+ return EGRATUITOUS;
memcpy (buf, data, nread);
__vm_deallocate (__mach_task_self (), (vm_address_t) data, nread);
}