[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[or-cvs] clean up 3 more underflow possibilities
Update of /home2/or/cvsroot/tor/src/or
In directory moria.mit.edu:/home2/arma/work/onion/cvs/tor/src/or
Modified Files:
router.c
Log Message:
clean up 3 more underflow possibilities
Index: router.c
===================================================================
RCS file: /home2/or/cvsroot/tor/src/or/router.c,v
retrieving revision 1.133
retrieving revision 1.134
diff -u -d -r1.133 -r1.134
--- router.c 2 Dec 2004 04:16:18 -0000 1.133
+++ router.c 2 Dec 2004 04:31:52 -0000 1.134
@@ -709,17 +709,15 @@
tor_free(identity_pkey);
tor_free(bandwidth_usage);
- if (result < 0 || (size_t)result >= maxlen) {
- /* apparently different glibcs do different things on tor_snprintf error.. so check both */
+ if (result < 0)
return -1;
- }
/* From now on, we use 'written' to remember the current length of 's'. */
written = result;
if (get_options()->ContactInfo && strlen(get_options()->ContactInfo)) {
result = tor_snprintf(s+written,maxlen-written, "opt contact %s\n",
get_options()->ContactInfo);
- if (result<0 || result+written > maxlen)
+ if (result<0)
return -1;
written += result;
}
@@ -731,36 +729,34 @@
result = tor_snprintf(s+written, maxlen-written, "%s %s",
tmpe->policy_type == ADDR_POLICY_ACCEPT ? "accept" : "reject",
tmpe->msk == 0 ? "*" : inet_ntoa(in));
- if (result < 0 || result+written > maxlen) {
- /* apparently different glibcs do different things on tor_snprintf error.. so check both */
+ if (result < 0)
return -1;
- }
written += result;
if (tmpe->msk != 0xFFFFFFFFu && tmpe->msk != 0) {
/* Write "/255.255.0.0" */
in.s_addr = htonl(tmpe->msk);
result = tor_snprintf(s+written, maxlen-written, "/%s", inet_ntoa(in));
- if (result<0 || result+written > maxlen)
+ if (result<0)
return -1;
written += result;
}
if (tmpe->prt_min <= 1 && tmpe->prt_max == 65535) {
/* There is no port set; write ":*" */
- if (written > maxlen-4)
+ if (written+4 > maxlen)
return -1;
strlcat(s+written, ":*\n", maxlen-written);
written += 3;
} else if (tmpe->prt_min == tmpe->prt_max) {
/* There is only one port; write ":80". */
result = tor_snprintf(s+written, maxlen-written, ":%d\n", tmpe->prt_min);
- if (result<0 || result+written > maxlen)
+ if (result<0)
return -1;
written += result;
} else {
/* There is a range of ports; write ":79-80". */
result = tor_snprintf(s+written, maxlen-written, ":%d-%d\n", tmpe->prt_min,
tmpe->prt_max);
- if (result<0 || result+written > maxlen)
+ if (result<0)
return -1;
written += result;
}
@@ -768,7 +764,7 @@
/* This was a catch-all rule, so future rules are irrelevant. */
break;
} /* end for */
- if (written > maxlen-256) /* Not enough room for signature. */
+ if (written+256 > maxlen) /* Not enough room for signature. */
return -1;
/* Sign the directory */
@@ -792,7 +788,7 @@
strlcat(s+written, "-----END SIGNATURE-----\n", maxlen-written);
written += strlen(s+written);
- if (written > maxlen-2)
+ if (written+2 > maxlen)
return -1;
/* include a last '\n' */
s[written] = '\n';