diff options
author | Mark Kettenis <kettenis@openbsd.org> | 2013-11-11 23:11:56 +0100 |
---|---|---|
committer | Uli Schlachter <psychon@znc.in> | 2013-11-18 16:52:33 +0100 |
commit | c7c5b710f2cc0782412c9e159986c96b52aa0d02 (patch) | |
tree | 5aeab7804ba91ac04b50f3a477c441326a6450cc /src/xcb_conn.c | |
parent | e8663a935890ff366f49e356211049dfd0d9756a (diff) |
Fix alignment issues in FD passing code
A char array on the stack is not guaranteed to have more than byte alignment.
This means that casting it to a 'struct cmsghdr' and accessing its members
may result in unaligned access. This will generate SIGBUS on struct
alignment architectures like OpenBSD/sparc64. The canonical solution is to
use a union to force proper alignment.
Signed-off-by: Mark Kettenis <kettenis@openbsd.org>
Reviewed-by: Matthieu Herrb <matthieu@herrb.eu>
Signed-off-by: Uli Schlachter <psychon@znc.in>
Diffstat (limited to 'src/xcb_conn.c')
-rw-r--r-- | src/xcb_conn.c | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/src/xcb_conn.c b/src/xcb_conn.c index 50e7fb6..46390e1 100644 --- a/src/xcb_conn.c +++ b/src/xcb_conn.c @@ -216,13 +216,16 @@ static int write_vec(xcb_connection_t *c, struct iovec **vector, int *count) #if HAVE_SENDMSG if (c->out.out_fd.nfd) { - char cmsgbuf[CMSG_SPACE(sizeof(int) * XCB_MAX_PASS_FD)]; + union { + struct cmsghdr cmsghdr; + char buf[CMSG_SPACE(XCB_MAX_PASS_FD * sizeof(int))]; + } cmsgbuf; struct msghdr msg = { .msg_name = NULL, .msg_namelen = 0, .msg_iov = *vector, .msg_iovlen = n, - .msg_control = cmsgbuf, + .msg_control = cmsgbuf.buf, .msg_controllen = CMSG_LEN(c->out.out_fd.nfd * sizeof (int)), }; int i; |