From owner-freebsd-bugs@FreeBSD.ORG Wed Mar 30 07:40:02 2005 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0342516A4CF for ; Wed, 30 Mar 2005 07:40:02 +0000 (GMT) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id AA51B43D4C for ; Wed, 30 Mar 2005 07:40:01 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id j2U7e1jA019309 for ; Wed, 30 Mar 2005 07:40:01 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id j2U7e1e5019307; Wed, 30 Mar 2005 07:40:01 GMT (envelope-from gnats) Resent-Date: Wed, 30 Mar 2005 07:40:01 GMT Resent-Message-Id: <200503300740.j2U7e1e5019307@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Craig Rodrigues Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7F34616A4CE; Wed, 30 Mar 2005 07:35:05 +0000 (GMT) Received: from sccrmhc14.comcast.net (sccrmhc14.comcast.net [204.127.202.59]) by mx1.FreeBSD.org (Postfix) with ESMTP id CD64543D39; Wed, 30 Mar 2005 07:35:04 +0000 (GMT) (envelope-from rodrigc@crodrigues.org) Received: from h00609772adf0.ne.client2.attbi.com ([66.30.114.143]) by comcast.net (sccrmhc14) with ESMTP id <2005033007350301400dlihve>; Wed, 30 Mar 2005 07:35:04 +0000 Received: from h00609772adf0.ne.client2.attbi.com (localhost.127.in-addr.arpa [127.0.0.1])j2U7Z32Y033845; Wed, 30 Mar 2005 02:35:04 -0500 (EST) (envelope-from rodrigc@h00609772adf0.ne.client2.attbi.com) Received: (from rodrigc@localhost)j2U7Z3e8033844; Wed, 30 Mar 2005 02:35:03 -0500 (EST) (envelope-from rodrigc) Message-Id: <200503300735.j2U7Z3e8033844@h00609772adf0.ne.client2.attbi.com> Date: Wed, 30 Mar 2005 02:35:03 -0500 (EST) From: Craig Rodrigues To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 cc: Alexander Kabaev cc: Robert Watson Subject: kern/79357: uiovcnt not initialized for exattr_get and extattr_list X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Craig Rodrigues List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Mar 2005 07:40:02 -0000 >Number: 79357 >Category: kern >Synopsis: uiovcnt not initialized for exattr_get and extattr_list >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Wed Mar 30 07:40:01 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Craig Rodrigues >Release: FreeBSD 6.0-CURRENT i386 >Organization: >Environment: System: FreeBSD dibbler.crodrigues.org 6.0-CURRENT FreeBSD 6.0-CURRENT #28: Sat Mar 26 13:25:05 EST 2005 rodrigc@dibbler.crodrigues.org:/opt/home/rodrigc/xfs/xfs_kernel/sys/i386/compile/XFS_KERNEL i386 >Description: This one is for rwatson to look at. The iovcnt is not initialized in a few system calls related to extended attributes. >How-To-Repeat: >Fix: --- sys/kern/vfs_syscalls.c.orig Tue Mar 29 23:32:21 2005 +++ sys/kern/vfs_syscalls.c Tue Mar 29 23:33:39 2005 @@ -4505,6 +4505,7 @@ aiov.iov_base = data; aiov.iov_len = nbytes; auio.uio_iov = &aiov; + auio.uio_iovcnt = 1; auio.uio_offset = 0; if (nbytes > INT_MAX) { error = EINVAL; @@ -4791,6 +4792,7 @@ aiov.iov_base = data; aiov.iov_len = nbytes; auio.uio_iov = &aiov; + auio.uio_iovcnt = 1; auio.uio_offset = 0; if (nbytes > INT_MAX) { error = EINVAL; >Release-Note: >Audit-Trail: >Unformatted: