2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()

			returned a misleading error code when lwresd was
			down. [RT #20028]

2661.	[bug]		Check whether socket fd exceeds FD_SETSIZE when
			creating lwres context. [RT #20029]

diff --git a/CHANGES b/CHANGES
index 3533ead98b83c852951670cb9f338be4604c8eb4..c9511e4484f59b969036a534201ce18bef0028a4 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,10 @@
+2662.  [bug]           lwres_getipnodebyname() and lwres_getipnodebyaddr() 
+                       returned a misleading error code when lwresd was
+                       down. [RT #20028]
+
+2661.  [bug]           Check whether socket fd exceeds FD_SETSIZE when
+                       creating lwres context. [RT #20029]
+
 
        --- 9.4.4b1 released ---
 

diff --git a/lib/lwres/context.c b/lib/lwres/context.c
index 5b8e00b6802c88863224039f19d4520a3472f338..edb929a3c7809d6c308ecc334b9aa3f9b918f9b5 100644 (file)
--- a/lib/lwres/context.c
+++ b/lib/lwres/context.c
@@ -15,7 +15,7 @@
  * PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: context.c,v 1.45.18.9 2008/12/17 23:46:00 tbox Exp $ */
+/* $Id: context.c,v 1.45.18.10 2009/09/01 06:55:10 each Exp $ */
 
 /*! \file context.c
    lwres_context_create() creates a #lwres_context_t structure for use in
@@ -471,6 +471,17 @@ lwres_context_sendrecv(lwres_context_t *ctx,
        result = lwres_context_send(ctx, sendbase, sendlen);
        if (result != LWRES_R_SUCCESS)
                return (result);
+       
+       /*
+        * If this is not checked, select() can overflow,
+        * causing corruption elsewhere.
+        */
+       if (ctx->sock >= FD_SETSIZE) {
+               close(ctx->sock);
+               ctx->sock = -1;
+               return (LWRES_R_IOERROR);
+       }
+
  again:
        FD_ZERO(&readfds);
        FD_SET(ctx->sock, &readfds);

diff --git a/lib/lwres/getipnode.c b/lib/lwres/getipnode.c
index ab4981481a6d6f321aa6923bef7b0fa9c927bfe1..8b4f12fb6af3f916c772c87f5c9ea743e86c9ec4 100644 (file)
--- a/lib/lwres/getipnode.c
+++ b/lib/lwres/getipnode.c
@@ -15,7 +15,7 @@
  * PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: getipnode.c,v 1.37.18.7 2007/08/28 07:20:06 tbox Exp $ */
+/* $Id: getipnode.c,v 1.37.18.8 2009/09/01 06:55:10 each Exp $ */
 
 /*! \file */
 
@@ -202,7 +202,7 @@ lwres_getipnodebyname(const char *name, int af, int flags, int *error_num) {
        struct in6_addr in6;
        struct hostent he, *he1 = NULL, *he2 = NULL, *he3 = NULL;
        int v4 = 0, v6 = 0;
-       int tmp_err;
+       int tmp_err = 0;
        lwres_context_t *lwrctx = NULL;
        lwres_gabnresponse_t *by = NULL;
        int n;
@@ -275,7 +275,6 @@ lwres_getipnodebyname(const char *name, int af, int flags, int *error_num) {
        (void) lwres_conf_parse(lwrctx, lwres_resolv_conf);
        tmp_err = NO_RECOVERY;
        if (have_v6 && af == AF_INET6) {
-
                n = lwres_getaddrsbyname(lwrctx, name, LWRES_ADDRTYPE_V6, &by);
                if (n == 0) {
                        he1 = hostfromname(by, AF_INET6);
@@ -285,7 +284,12 @@ lwres_getipnodebyname(const char *name, int af, int flags, int *error_num) {
                                goto cleanup;
                        }
                } else {
-                       tmp_err = HOST_NOT_FOUND;
+                       if (n == LWRES_R_NOTFOUND)
+                               tmp_err = HOST_NOT_FOUND;
+                       else {
+                               *error_num = NO_RECOVERY;
+                               goto cleanup;
+                       }
                }
        }
 
@@ -311,7 +315,7 @@ lwres_getipnodebyname(const char *name, int af, int flags, int *error_num) {
        } else
                *error_num = tmp_err;
 
-       he3 = copyandmerge(he1, he2, af, error_num);
+        he3 = copyandmerge(he1, he2, af, error_num);
 
  cleanup:
        if (he1 != NULL)
@@ -437,9 +441,15 @@ lwres_getipnodebyaddr(const void *src, size_t len, int af, int *error_num) {
        if (n != 0) {
                lwres_conf_clear(lwrctx);
                lwres_context_destroy(&lwrctx);
-               *error_num = HOST_NOT_FOUND;
+
+               if (n == LWRES_R_NOTFOUND)
+                      *error_num = HOST_NOT_FOUND;
+               else
+                      *error_num = NO_RECOVERY;
+
                return (NULL);
        }
+
        he1 = hostfromaddr(by, AF_INET6, src);
        lwres_gnbaresponse_free(lwrctx, &by);
        if (he1 == NULL)