From: Heiko Voigt <hvoigt@hvoigt.net>
To: Mike Mueller <mmueller@vigilantsw.com>
Cc: git@vger.kernel.org
Subject: Re: [PATCH] Fix segfault in fast-export
Date: Mon, 18 Jan 2010 18:44:38 +0100 [thread overview]
Message-ID: <20100118174437.GB9576@book.hvoigt.net> (raw)
In-Reply-To: <20100107035839.GM8510@samus.subfocal.net>
Hi,
if want your change included in git you probably want to CC: Junio and
inline your patch so its easier to comment. Please see the file
Documentation/SubmittingPatches for tips on how to do it with your
mailer.
cheers Heiko
P.S.: and include a commit message in your patch
On Wed, Jan 06, 2010 at 10:58:39PM -0500, Mike Mueller wrote:
> Hi all,
>
> I'm working on a C++ static analyzer (Vigilant Sentry), and git
> is one of my test subjects. In git-1.6.6, I found a crash in the
> fast-export command:
>
> The problem is in builtin-fast-export.c, function export_marks:
>
> f = fopen(file, "w");
> if (!f)
> error("Unable to open marks file %s for writing.", file);
>
> for (i = 0; i < idnums.size; i++) {
> if (deco->base && deco->base->type == 1) {
> mark = ptr_to_mark(deco->decoration);
> if (fprintf(f, ":%"PRIu32" %s\n", mark,
> sha1_to_hex(deco->base->sha1)) < 0) {
> e = 1;
> break;
> }
> }
> deco++;
> }
>
> e |= ferror(f);
> e |= fclose(f);
>
> If fopen() fails, the error message is printed, but the function
> doesn't exit. The subsequent calls to fprintf and/or ferror will
> fail because f is NULL. A simple way to reproduce is to export
> to a path you don't have write access to:
>
> $ git fast-export --export-marks=/foo
> error: Unable to open marks file /foo for writing.
> Segmentation fault (core dumped)
>
> I've attached a trivial patch that calls die_errno instead of
> error, so the program exits if f is NULL.
>
> Regards,
> Mike
>
> --
> Mike Mueller
> mmueller@vigilantsw.com
>
> http://www.vigilantsw.com/
> diff --git a/builtin-fast-export.c b/builtin-fast-export.c
> index b0a4029..963e89b 100644
> --- a/builtin-fast-export.c
> +++ b/builtin-fast-export.c
> @@ -503,7 +503,7 @@ static void export_marks(char *file)
>
> f = fopen(file, "w");
> if (!f)
> - error("Unable to open marks file %s for writing.", file);
> + die_errno("Unable to open marks file %s for writing", file);
>
> for (i = 0; i < idnums.size; i++) {
> if (deco->base && deco->base->type == 1) {
prev parent reply other threads:[~2010-01-18 17:44 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-01-07 3:58 [PATCH] Fix segfault in fast-export Mike Mueller
2010-01-18 17:44 ` Heiko Voigt [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: http://vger.kernel.org/majordomo-info.html
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20100118174437.GB9576@book.hvoigt.net \
--to=hvoigt@hvoigt.net \
--cc=git@vger.kernel.org \
--cc=mmueller@vigilantsw.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://80x24.org/mirrors/git.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).