|
 |
99be8f |
From fa8b9f8fa8a6762bb0151e65a11eca9dca7aca83 Mon Sep 17 00:00:00 2001
|
|
|
99be8f |
From: Andrea Claudi <aclaudi@redhat.com>
|
|
|
99be8f |
Date: Mon, 29 Apr 2019 20:07:22 +0200
|
|
|
99be8f |
Subject: [PATCH] ss: Don't leak fd in tcp_show_netlink_file()
|
|
|
99be8f |
|
|
|
99be8f |
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1465646
|
|
|
99be8f |
Upstream Status: iproute2.git commit 4b45ae221e949
|
|
|
99be8f |
|
|
|
99be8f |
commit 4b45ae221e949b604d968a10d5d996c7c7cec1a6
|
|
|
99be8f |
Author: Phil Sutter <phil@nwl.cc>
|
|
|
99be8f |
Date: Thu Aug 17 19:09:30 2017 +0200
|
|
|
99be8f |
|
|
|
99be8f |
ss: Don't leak fd in tcp_show_netlink_file()
|
|
|
99be8f |
|
|
|
99be8f |
Signed-off-by: Phil Sutter <phil@nwl.cc>
|
|
|
99be8f |
---
|
|
|
99be8f |
misc/ss.c | 32 ++++++++++++++++++++------------
|
|
|
99be8f |
1 file changed, 20 insertions(+), 12 deletions(-)
|
|
|
99be8f |
|
|
|
99be8f |
diff --git a/misc/ss.c b/misc/ss.c
|
|
|
99be8f |
index 86defc71fabc4..eb46e0c4b95fb 100644
|
|
|
99be8f |
--- a/misc/ss.c
|
|
|
99be8f |
+++ b/misc/ss.c
|
|
|
99be8f |
@@ -2764,41 +2764,44 @@ static int tcp_show_netlink_file(struct filter *f)
|
|
|
99be8f |
{
|
|
|
99be8f |
FILE *fp;
|
|
|
99be8f |
char buf[16384];
|
|
|
99be8f |
+ int err = -1;
|
|
|
99be8f |
|
|
|
99be8f |
if ((fp = fopen(getenv("TCPDIAG_FILE"), "r")) == NULL) {
|
|
|
99be8f |
perror("fopen($TCPDIAG_FILE)");
|
|
|
99be8f |
- return -1;
|
|
|
99be8f |
+ return err;
|
|
|
99be8f |
}
|
|
|
99be8f |
|
|
|
99be8f |
while (1) {
|
|
|
99be8f |
- int status, err;
|
|
|
99be8f |
+ int status, err2;
|
|
|
99be8f |
struct nlmsghdr *h = (struct nlmsghdr *)buf;
|
|
|
99be8f |
struct sockstat s = {};
|
|
|
99be8f |
|
|
|
99be8f |
status = fread(buf, 1, sizeof(*h), fp);
|
|
|
99be8f |
if (status < 0) {
|
|
|
99be8f |
perror("Reading header from $TCPDIAG_FILE");
|
|
|
99be8f |
- return -1;
|
|
|
99be8f |
+ break;
|
|
|
99be8f |
}
|
|
|
99be8f |
if (status != sizeof(*h)) {
|
|
|
99be8f |
perror("Unexpected EOF reading $TCPDIAG_FILE");
|
|
|
99be8f |
- return -1;
|
|
|
99be8f |
+ break;
|
|
|
99be8f |
}
|
|
|
99be8f |
|
|
|
99be8f |
status = fread(h+1, 1, NLMSG_ALIGN(h->nlmsg_len-sizeof(*h)), fp);
|
|
|
99be8f |
|
|
|
99be8f |
if (status < 0) {
|
|
|
99be8f |
perror("Reading $TCPDIAG_FILE");
|
|
|
99be8f |
- return -1;
|
|
|
99be8f |
+ break;
|
|
|
99be8f |
}
|
|
|
99be8f |
if (status + sizeof(*h) < h->nlmsg_len) {
|
|
|
99be8f |
perror("Unexpected EOF reading $TCPDIAG_FILE");
|
|
|
99be8f |
- return -1;
|
|
|
99be8f |
+ break;
|
|
|
99be8f |
}
|
|
|
99be8f |
|
|
|
99be8f |
/* The only legal exit point */
|
|
|
99be8f |
- if (h->nlmsg_type == NLMSG_DONE)
|
|
|
99be8f |
- return 0;
|
|
|
99be8f |
+ if (h->nlmsg_type == NLMSG_DONE) {
|
|
|
99be8f |
+ err = 0;
|
|
|
99be8f |
+ break;
|
|
|
99be8f |
+ }
|
|
|
99be8f |
|
|
|
99be8f |
if (h->nlmsg_type == NLMSG_ERROR) {
|
|
|
99be8f |
struct nlmsgerr *err = (struct nlmsgerr *)NLMSG_DATA(h);
|
|
|
99be8f |
@@ -2809,7 +2812,7 @@ static int tcp_show_netlink_file(struct filter *f)
|
|
|
99be8f |
errno = -err->error;
|
|
|
99be8f |
perror("TCPDIAG answered");
|
|
|
99be8f |
}
|
|
|
99be8f |
- return -1;
|
|
|
99be8f |
+ break;
|
|
|
99be8f |
}
|
|
|
99be8f |
|
|
|
99be8f |
parse_diag_msg(h, &s);
|
|
|
99be8f |
@@ -2818,10 +2821,15 @@ static int tcp_show_netlink_file(struct filter *f)
|
|
|
99be8f |
if (f && f->f && run_ssfilter(f->f, &s) == 0)
|
|
|
99be8f |
continue;
|
|
|
99be8f |
|
|
|
99be8f |
- err = inet_show_sock(h, &s);
|
|
|
99be8f |
- if (err < 0)
|
|
|
99be8f |
- return err;
|
|
|
99be8f |
+ err2 = inet_show_sock(h, &s);
|
|
|
99be8f |
+ if (err2 < 0) {
|
|
|
99be8f |
+ err = err2;
|
|
|
99be8f |
+ break;
|
|
|
99be8f |
+ }
|
|
|
99be8f |
}
|
|
|
99be8f |
+
|
|
|
99be8f |
+ fclose(fp);
|
|
|
99be8f |
+ return err;
|
|
|
99be8f |
}
|
|
|
99be8f |
|
|
|
99be8f |
static int tcp_show(struct filter *f)
|
|
|
99be8f |
--
|
|
|
99be8f |
2.20.1
|
|
|
99be8f |
|