a41fe4
commit 2bbd07c715275eb6c616988925738a0517180d57
a41fe4
Author: Siddhesh Poyarekar <siddhesh@sourceware.org>
a41fe4
Date:   Fri Dec 17 18:35:44 2021 +0530
a41fe4
a41fe4
    fortify: Fix spurious warning with realpath
a41fe4
    
a41fe4
    The length and object size arguments were swapped around for realpath.
a41fe4
    Also add a smoke test so that any changes in this area get caught in
a41fe4
    future.
a41fe4
    
a41fe4
    Signed-off-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
a41fe4
    Reviewed-by: Adhemerval Zanella <adhemerval.zanella@linaro.org>
a41fe4
a41fe4
diff --git a/debug/Makefile b/debug/Makefile
a41fe4
index 81361438fc3d2aa9..b43f42ee3851f360 100644
a41fe4
--- a/debug/Makefile
a41fe4
+++ b/debug/Makefile
a41fe4
@@ -108,6 +108,7 @@ CFLAGS-tst-longjmp_chk2.c += -fexceptions -fasynchronous-unwind-tables
a41fe4
 CPPFLAGS-tst-longjmp_chk2.c += -D_FORTIFY_SOURCE=1
a41fe4
 CFLAGS-tst-longjmp_chk3.c += -fexceptions -fasynchronous-unwind-tables
a41fe4
 CPPFLAGS-tst-longjmp_chk3.c += -D_FORTIFY_SOURCE=1
a41fe4
+CPPFLAGS-tst-realpath-chk.c += -D_FORTIFY_SOURCE=2
a41fe4
 
a41fe4
 # We know these tests have problems with format strings, this is what
a41fe4
 # we are testing.  Disable that warning.  They are also testing
a41fe4
@@ -155,7 +156,7 @@ tests = backtrace-tst tst-longjmp_chk tst-chk1 tst-chk2 tst-chk3 \
a41fe4
 	tst-lfschk1 tst-lfschk2 tst-lfschk3 test-strcpy_chk test-stpcpy_chk \
a41fe4
 	tst-chk4 tst-chk5 tst-chk6 tst-chk7 tst-chk8 tst-lfschk4 tst-lfschk5 \
a41fe4
 	tst-lfschk6 tst-longjmp_chk2 tst-backtrace2 tst-backtrace3 \
a41fe4
-	tst-backtrace4 tst-backtrace5 tst-backtrace6
a41fe4
+	tst-backtrace4 tst-backtrace5 tst-backtrace6 tst-realpath-chk
a41fe4
 
a41fe4
 ifeq ($(have-ssp),yes)
a41fe4
 tests += tst-ssp-1
a41fe4
diff --git a/debug/tst-realpath-chk.c b/debug/tst-realpath-chk.c
a41fe4
new file mode 100644
a41fe4
index 0000000000000000..a8fcb327c43fb34d
a41fe4
--- /dev/null
a41fe4
+++ b/debug/tst-realpath-chk.c
a41fe4
@@ -0,0 +1,37 @@
a41fe4
+/* Smoke test to verify that realpath does not cause spurious warnings.
a41fe4
+   Copyright The GNU Toolchain Authors.
a41fe4
+   This file is part of the GNU C Library.
a41fe4
+
a41fe4
+   The GNU C Library is free software; you can redistribute it and/or
a41fe4
+   modify it under the terms of the GNU Lesser General Public
a41fe4
+   License as published by the Free Software Foundation; either
a41fe4
+   version 2.1 of the License, or (at your option) any later version.
a41fe4
+
a41fe4
+   The GNU C Library is distributed in the hope that it will be useful,
a41fe4
+   but WITHOUT ANY WARRANTY; without even the implied warranty of
a41fe4
+   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
a41fe4
+   Lesser General Public License for more details.
a41fe4
+
a41fe4
+   You should have received a copy of the GNU Lesser General Public
a41fe4
+   License along with the GNU C Library; if not, see
a41fe4
+   <https://www.gnu.org/licenses/>.  */
a41fe4
+
a41fe4
+#include <limits.h>
a41fe4
+#include <stdlib.h>
a41fe4
+
a41fe4
+#include <support/check.h>
a41fe4
+#include <support/support.h>
a41fe4
+
a41fe4
+static int
a41fe4
+do_test (void)
a41fe4
+{
a41fe4
+#ifdef PATH_MAX
a41fe4
+  char buf[PATH_MAX + 1];
a41fe4
+  char *res = realpath (".", buf);
a41fe4
+  TEST_VERIFY (res == buf);
a41fe4
+#endif
a41fe4
+
a41fe4
+  return 0;
a41fe4
+}
a41fe4
+
a41fe4
+#include <support/test-driver.c>
a41fe4
diff --git a/stdlib/bits/stdlib.h b/stdlib/bits/stdlib.h
a41fe4
index 7ea364a276497720..81ec9bdb32215e3b 100644
a41fe4
--- a/stdlib/bits/stdlib.h
a41fe4
+++ b/stdlib/bits/stdlib.h
a41fe4
@@ -42,7 +42,7 @@ __NTH (realpath (const char *__restrict __name, char *__restrict __resolved))
a41fe4
     return __realpath_alias (__name, __resolved);
a41fe4
 
a41fe4
 #if defined _LIBC_LIMITS_H_ && defined PATH_MAX
a41fe4
-  if (__glibc_unsafe_len (sz, sizeof (char), PATH_MAX))
a41fe4
+  if (__glibc_unsafe_len (PATH_MAX, sizeof (char), sz))
a41fe4
     return __realpath_chk_warn (__name, __resolved, sz);
a41fe4
 #endif
a41fe4
   return __realpath_chk (__name, __resolved, sz);