Browse Source

fix crashes in refactored passwd/group code

the wrong condition was used in determining the presence of a result
that needs space/copying for the _r functions. a zero return value
does not necessarily mean success; it can also be a non-error negative
result: no such user/group.
Rich Felker 10 years ago
parent
commit
fc5a96c9c8
2 changed files with 4 additions and 4 deletions
  1. 2 2
      src/passwd/getgr_r.c
  2. 2 2
      src/passwd/getpw_r.c

+ 2 - 2
src/passwd/getgr_r.c

@@ -16,11 +16,11 @@ static int getgr_r(const char *name, gid_t gid, struct group *gr, char *buf, siz
 	pthread_setcancelstate(PTHREAD_CANCEL_DISABLE, &cs);
 
 	rv = __getgr_a(name, gid, gr, &line, &len, &mem, &nmem, res);
-	if (!rv && size < len + (nmem+1)*sizeof(char *) + 32) {
+	if (*res && size < len + (nmem+1)*sizeof(char *) + 32) {
 		*res = 0;
 		rv = ERANGE;
 	}
-	if (!rv) {
+	if (*res) {
 		buf += (16-(uintptr_t)buf)%16;
 		gr->gr_mem = (void *)buf;
 		buf += (nmem+1)*sizeof(char *);

+ 2 - 2
src/passwd/getpw_r.c

@@ -13,11 +13,11 @@ static int getpw_r(const char *name, uid_t uid, struct passwd *pw, char *buf, si
 	pthread_setcancelstate(PTHREAD_CANCEL_DISABLE, &cs);
 
 	rv = __getpw_a(name, uid, pw, &line, &len, res);
-	if (!rv && size < len) {
+	if (*res && size < len) {
 		*res = 0;
 		rv = ERANGE;
 	}
-	if (!rv) {
+	if (*res) {
 		memcpy(buf, line, len);
 		FIX(name);
 		FIX(passwd);