Skip to content

Commit

Permalink
---
Browse files Browse the repository at this point in the history
yaml
---
r: 185737
b: refs/heads/master
c: 8d8ffef
h: refs/heads/master
i:
  185735: b39ed1e
v: v3
  • Loading branch information
André Goddard Rosa authored and Al Viro committed Mar 3, 2010
1 parent 25926bb commit 27f24cc
Show file tree
Hide file tree
Showing 2 changed files with 51 additions and 28 deletions.
2 changes: 1 addition & 1 deletion [refs]
Original file line number Diff line number Diff line change
@@ -1,2 +1,2 @@
---
refs/heads/master: 04db0dde0ee1c29110642dff57fba9e438eb805c
refs/heads/master: 8d8ffefaaf63f0468f17fbd1270165e739cf335e
77 changes: 50 additions & 27 deletions trunk/ipc/mqueue.c
Original file line number Diff line number Diff line change
Expand Up @@ -184,7 +184,7 @@ static int mqueue_fill_super(struct super_block *sb, void *data, int silent)
{
struct inode *inode;
struct ipc_namespace *ns = data;
int error = 0;
int error;

sb->s_blocksize = PAGE_CACHE_SIZE;
sb->s_blocksize_bits = PAGE_CACHE_SHIFT;
Expand All @@ -202,7 +202,9 @@ static int mqueue_fill_super(struct super_block *sb, void *data, int silent)
if (!sb->s_root) {
iput(inode);
error = -ENOMEM;
goto out;
}
error = 0;

out:
return error;
Expand Down Expand Up @@ -621,9 +623,10 @@ static struct file *do_create(struct ipc_namespace *ipc_ns, struct dentry *dir,
int ret;

if (attr) {
ret = -EINVAL;
if (!mq_attr_ok(ipc_ns, attr))
if (!mq_attr_ok(ipc_ns, attr)) {
ret = -EINVAL;
goto out;
}
/* store for use during create */
dentry->d_fsdata = attr;
}
Expand Down Expand Up @@ -714,19 +717,21 @@ SYSCALL_DEFINE4(mq_open, const char __user *, u_name, int, oflag, mode_t, mode,
if (oflag & O_CREAT) {
if (dentry->d_inode) { /* entry already exists */
audit_inode(name, dentry);
error = -EEXIST;
if (oflag & O_EXCL)
if (oflag & O_EXCL) {
error = -EEXIST;
goto out;
}
filp = do_open(ipc_ns, dentry, oflag);
} else {
filp = do_create(ipc_ns, ipc_ns->mq_mnt->mnt_root,
dentry, oflag, mode,
u_attr ? &attr : NULL);
}
} else {
error = -ENOENT;
if (!dentry->d_inode)
if (!dentry->d_inode) {
error = -ENOENT;
goto out;
}
audit_inode(name, dentry);
filp = do_open(ipc_ns, dentry, oflag);
}
Expand Down Expand Up @@ -873,19 +878,24 @@ SYSCALL_DEFINE5(mq_timedsend, mqd_t, mqdes, const char __user *, u_msg_ptr,
audit_mq_sendrecv(mqdes, msg_len, msg_prio, p);
timeout = prepare_timeout(p);

ret = -EBADF;
filp = fget(mqdes);
if (unlikely(!filp))
if (unlikely(!filp)) {
ret = -EBADF;
goto out;
}

inode = filp->f_path.dentry->d_inode;
if (unlikely(filp->f_op != &mqueue_file_operations))
if (unlikely(filp->f_op != &mqueue_file_operations)) {
ret = -EBADF;
goto out_fput;
}
info = MQUEUE_I(inode);
audit_inode(NULL, filp->f_path.dentry);

if (unlikely(!(filp->f_mode & FMODE_WRITE)))
if (unlikely(!(filp->f_mode & FMODE_WRITE))) {
ret = -EBADF;
goto out_fput;
}

if (unlikely(msg_len > info->attr.mq_msgsize)) {
ret = -EMSGSIZE;
Expand Down Expand Up @@ -962,19 +972,24 @@ SYSCALL_DEFINE5(mq_timedreceive, mqd_t, mqdes, char __user *, u_msg_ptr,
audit_mq_sendrecv(mqdes, msg_len, 0, p);
timeout = prepare_timeout(p);

ret = -EBADF;
filp = fget(mqdes);
if (unlikely(!filp))
if (unlikely(!filp)) {
ret = -EBADF;
goto out;
}

inode = filp->f_path.dentry->d_inode;
if (unlikely(filp->f_op != &mqueue_file_operations))
if (unlikely(filp->f_op != &mqueue_file_operations)) {
ret = -EBADF;
goto out_fput;
}
info = MQUEUE_I(inode);
audit_inode(NULL, filp->f_path.dentry);

if (unlikely(!(filp->f_mode & FMODE_READ)))
if (unlikely(!(filp->f_mode & FMODE_READ))) {
ret = -EBADF;
goto out_fput;
}

/* checks if buffer is big enough */
if (unlikely(msg_len < info->attr.mq_msgsize)) {
Expand Down Expand Up @@ -1064,13 +1079,14 @@ SYSCALL_DEFINE2(mq_notify, mqd_t, mqdes,

/* create the notify skb */
nc = alloc_skb(NOTIFY_COOKIE_LEN, GFP_KERNEL);
ret = -ENOMEM;
if (!nc)
if (!nc) {
ret = -ENOMEM;
goto out;
ret = -EFAULT;
}
if (copy_from_user(nc->data,
notification.sigev_value.sival_ptr,
NOTIFY_COOKIE_LEN)) {
ret = -EFAULT;
goto out;
}

Expand All @@ -1079,9 +1095,10 @@ SYSCALL_DEFINE2(mq_notify, mqd_t, mqdes,
/* and attach it to the socket */
retry:
filp = fget(notification.sigev_signo);
ret = -EBADF;
if (!filp)
if (!filp) {
ret = -EBADF;
goto out;
}
sock = netlink_getsockbyfilp(filp);
fput(filp);
if (IS_ERR(sock)) {
Expand All @@ -1093,7 +1110,7 @@ SYSCALL_DEFINE2(mq_notify, mqd_t, mqdes,
timeo = MAX_SCHEDULE_TIMEOUT;
ret = netlink_attachskb(sock, nc, &timeo, NULL);
if (ret == 1)
goto retry;
goto retry;
if (ret) {
sock = NULL;
nc = NULL;
Expand All @@ -1102,14 +1119,17 @@ SYSCALL_DEFINE2(mq_notify, mqd_t, mqdes,
}
}

ret = -EBADF;
filp = fget(mqdes);
if (!filp)
if (!filp) {
ret = -EBADF;
goto out;
}

inode = filp->f_path.dentry->d_inode;
if (unlikely(filp->f_op != &mqueue_file_operations))
if (unlikely(filp->f_op != &mqueue_file_operations)) {
ret = -EBADF;
goto out_fput;
}
info = MQUEUE_I(inode);

ret = 0;
Expand Down Expand Up @@ -1172,14 +1192,17 @@ SYSCALL_DEFINE3(mq_getsetattr, mqd_t, mqdes,
return -EINVAL;
}

ret = -EBADF;
filp = fget(mqdes);
if (!filp)
if (!filp) {
ret = -EBADF;
goto out;
}

inode = filp->f_path.dentry->d_inode;
if (unlikely(filp->f_op != &mqueue_file_operations))
if (unlikely(filp->f_op != &mqueue_file_operations)) {
ret = -EBADF;
goto out_fput;
}
info = MQUEUE_I(inode);

spin_lock(&info->lock);
Expand Down

0 comments on commit 27f24cc

Please sign in to comment.