Return-Path: Received: from mx1.redhat.com ([209.132.183.28]:53194 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751040AbdFBI5e (ORCPT ); Fri, 2 Jun 2017 04:57:34 -0400 Received: from smtp.corp.redhat.com (int-mx05.intmail.prod.int.phx2.redhat.com [10.5.11.15]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id CA892334584 for ; Fri, 2 Jun 2017 08:57:33 +0000 (UTC) Message-ID: <1496393851.4126.28.camel@redhat.com> Subject: Re: [PATCH 3/3] nfs.conf tidy ups From: Justin Mitchell To: Steve Dickson Cc: "linux-nfs@vger.kernel.org" Date: Fri, 02 Jun 2017 09:57:31 +0100 In-Reply-To: <315be6f9-ad62-37b8-4233-e9d97a69d8a9@RedHat.com> References: <1495468363.4169.13.camel@redhat.com> <315be6f9-ad62-37b8-4233-e9d97a69d8a9@RedHat.com> Content-Type: text/plain; charset="UTF-8" Mime-Version: 1.0 Sender: linux-nfs-owner@vger.kernel.org List-ID: On Thu, 2017-06-01 at 11:07 -0400, Steve Dickson wrote: > Hello, > > On 05/22/2017 11:52 AM, Justin Mitchell wrote: > > Remove the line length parameter and associated code which > > led to buffer overruns in the line parsing code. > Where these buffer overruns caused by the first patch > or where they originally there? If it is the latter > what had to happen to cause them, being we never > saw them. Already there, the conf_parse_line function is passed the length of the 'line' it is processing (out of a larger buffer containing the whole file). early on the start of the line pointer can get moved to strip leading whitespace but it later iterates from this new point for an original-length worth of characters, overrunning the line and potentially the buffer as a whole. This is likely from long term code creep as some parts of the line parsing used this naive string length looping, and other parts use smarter functions. so rather than repeatedly updating and counting lengths it seemed more robust to replace these loops with code which obeys the existing nul markers. > > > Also drops the undocumented 'include' directive. > Good call! my motive for this is that when we get to a point of being able to write/modify the configs through an API it will be a potential headache trying to figure out which file a given change should be written to. > > steved. > > > > Signed-off-by: Justin Mitchell > > > > --- > > support/nfs/conffile.c | 201 ++++++++++++++++++++++++++++--------------------- > > 1 file changed, 117 insertions(+), 84 deletions(-) > > > > diff --git a/support/nfs/conffile.c b/support/nfs/conffile.c > > index 7c607c0..449ac1c 100644 > > --- a/support/nfs/conffile.c > > +++ b/support/nfs/conffile.c > > @@ -212,15 +212,10 @@ conf_set_now(char *section, char *arg, char *tag, > > * headers and feed tag-value pairs into our configuration database. > > */ > > static void > > -conf_parse_line(int trans, char *line, size_t sz, char **section, char **subsection) > > +conf_parse_line(int trans, char *line, int lineno, char **section, char **subsection) > > { > > char *val, *ptr; > > - size_t i; > > - size_t j; > > - static int ln = 0; > > > > - /* Lines starting with '#' or ';' are comments. */ > > - ln++; > > /* Ignore blank lines */ > > if (*line == '\0') > > return; > > @@ -229,113 +224,149 @@ conf_parse_line(int trans, char *line, size_t sz, char **section, char **subsect > > while (isblank(*line)) > > line++; > > > > + /* Lines starting with '#' or ';' are comments. */ > > if (*line == '#' || *line == ';') > > return; > > > > /* '[section]' parsing... */ > > if (*line == '[') { > > line++; > > + > > + if (*section) { > > + free(*section); > > + *section = NULL; > > + } > > + if (*subsection) { > > + free(*subsection); > > + *subsection = NULL; > > + } > > + > > /* Strip off any blanks after '[' */ > > while (isblank(*line)) > > line++; > > - for (i = 0; i < sz; i++) { > > - if (line[i] == ']') { > > - break; > > - } > > - } > > - if (*section) > > - free(*section); > > - if (i == sz) { > > + > > + /* find the closing ] */ > > + ptr = strchr(line, ']'); > > + if (ptr == NULL) { > > xlog_warn("config file error: line %d: " > > - "non-matched ']', ignoring until next section", ln); > > - *section = NULL; > > + "non-matched ']', ignoring until next section", lineno); > > return; > > } > > + > > + /* just ignore everything after the closing ] */ > > + *(ptr--) = '\0'; > > + > > /* Strip off any blanks before ']' */ > > - val = line; > > - j=0; > > - while (*val && !isblank(*val)) > > - val++, j++; > > - if (*val) > > - i = j; > > - *section = malloc(i+1); > > + while (ptr >= line && isblank(*ptr)) > > + *(ptr--)='\0'; > > + > > + /* look for an arg to split from the section name */ > > + val = strchr(line, '"'); > > + if (val != NULL) { > > + ptr = val - 1; > > + *(val++) = '\0'; > > + > > + /* trim away any whitespace before the " */ > > + while (ptr > line && isblank(*ptr)) > > + *(ptr--)='\0'; > > + } > > + > > + /* copy the section name */ > > + *section = strdup(line); > > if (!*section) { > > - xlog_warn("conf_parse_line: %d: malloc (%lu) failed", ln, > > - (unsigned long)i); > > + xlog_warn("conf_parse_line: %d: malloc failed", lineno); > > return; > > } > > - strncpy(*section, line, i); > > - (*section)[i] = '\0'; > > > > - if (*subsection) { > > - free(*subsection); > > - *subsection = NULL; > > - } > > + /* there is no arg, we are done */ > > + if (val == NULL) return; > > > > + /* check for the closing " */ > > ptr = strchr(val, '"'); > > - if (ptr == NULL) > > - return; > > - line = ++ptr; > > - while (*ptr && *ptr != '"' && *ptr != ']') > > - ptr++; > > - if (*ptr == '\0' || *ptr == ']') { > > + if (ptr == NULL) { > > xlog_warn("config file error: line %d: " > > - "non-matched '\"', ignoring until next section", ln); > > - } else { > > - *ptr = '\0'; > > - *subsection = strdup(line); > > - if (!*subsection) > > - xlog_warn("conf_parse_line: %d: malloc arg failed", ln); > > + "non-matched '\"', ignoring until next section", lineno); > > + return; > > } > > + *ptr = '\0'; > > + *subsection = strdup(val); > > + if (!*subsection) > > + xlog_warn("conf_parse_line: %d: malloc arg failed", lineno); > > return; > > } > > > > /* Deal with assignments. */ > > - for (i = 0; i < sz; i++) { > > - if (line[i] == '=') { > > - /* If no section, we are ignoring the lines. */ > > - if (!*section) { > > + ptr = strchr(line, '='); > > + > > + /* not an assignment line */ > > + if (ptr == NULL) { > > + /* Other non-empty lines are weird. */ > > + if (line[strspn(line, " \t")]) > > xlog_warn("config file error: line %d: " > > - "ignoring line due to no section", ln); > > - return; > > - } > > - line[strcspn (line, " \t=")] = '\0'; > > - val = line + i + 1 + strspn (line + i + 1, " \t"); > > - > > - if (val[0] == '"') { > > - val ++; > > - j = strcspn(val, "\""); > > - val[j] = 0; > > - } else if (val[0] == '\'') { > > - val ++; > > - j = strcspn(val, "'"); > > - val[j] = 0; > > - } else { > > - /* Skip trailing spaces and comments */ > > - for (j = 0; val[j]; j++) { > > - if ((val[j] == '#' || val[j] == ';') > > - && (j == 0 || isspace(val[j-1]))) { > > - val[j] = '\0'; > > - break; > > - } > > - } > > - while (j && isspace(val[j-1])) > > - val[--j] = '\0'; > > - } > > - if (strcasecmp(line, "include") == 0) > > - conf_load(trans, val); > > - else > > - /* XXX Perhaps should we not ignore errors? */ > > - conf_set(trans, *section, *subsection, line, val, 0, 0); > > + "line not empty and not an assignment", lineno); > > + return; > > + } > > + > > + /* If no section, we are ignoring the line. */ > > + if (!*section) { > > + xlog_warn("config file error: line %d: " > > + "ignoring line due to no section", lineno); > > + return; > > + } > > + > > + val = ptr + 1; > > + *(ptr--) = '\0'; > > + > > + /* strip spaces before and after the = */ > > + while (ptr >= line && isblank(*ptr)) > > + *(ptr--)='\0'; > > + while (*val != '\0' && isblank(*val)) > > + val++; > > + > > + if (*val == '"') { > > + val++; > > + ptr = strchr(val, '"'); > > + if (ptr == NULL) { > > + xlog_warn("config file error: line %d: " > > + "unmatched quotes", lineno); > > return; > > } > > + *ptr = '\0'; > > + } else > > + if (*val == '\'') { > > + val++; > > + ptr = strchr(val, '\''); > > + if (ptr == NULL) { > > + xlog_warn("config file error: line %d: " > > + "unmatched quotes", lineno); > > + return; > > + } > > + *ptr = '\0'; > > + } else { > > + /* Trim any trailing spaces and comments */ > > + if ((ptr=strchr(val, '#'))!=NULL) > > + *ptr = '\0'; > > + if ((ptr=strchr(val, ';'))!=NULL) > > + *ptr = '\0'; > > + > > + ptr = val + strlen(val) - 1; > > + while (ptr > val && isspace(*ptr)) > > + *(ptr--) = '\0'; > > } > > - /* Other non-empty lines are weird. */ > > - i = strspn(line, " \t"); > > - if (line[i]) > > - xlog_warn("config file error: line %d:", ln); > > > > - return; > > + if (*line == '\0') { > > + xlog_warn("config file error: line %d: " > > + "missing tag in assignment", lineno); > > + return; > > + } > > + if (*val == '\0') { > > + xlog_warn("config file error: line %d: " > > + "missing value in assignment", lineno); > > + return; > > + } > > + > > + /* XXX Perhaps should we not ignore errors? */ > > + conf_set(trans, *section, *subsection, line, val, 0, 0); > > } > > > > /* Parse the mapped configuration file. */ > > @@ -347,6 +378,7 @@ conf_parse(int trans, char *buf, size_t sz) > > char *line; > > char *section = NULL; > > char *subsection = NULL; > > + int lineno = 0; > > > > line = cp; > > while (cp < bufend) { > > @@ -356,7 +388,8 @@ conf_parse(int trans, char *buf, size_t sz) > > *(cp - 1) = *cp = ' '; > > else { > > *cp = '\0'; > > - conf_parse_line(trans, line, cp - line, §ion, &subsection); > > + lineno++; > > + conf_parse_line(trans, line, lineno, §ion, &subsection); > > line = cp + 1; > > } > > } > >