summary refs log tree commit diff
path: root/nscd
diff options
context:
space:
mode:
authorFlorian Weimer <fweimer@redhat.com>2015-04-08 20:58:58 +0200
committerFlorian Weimer <fweimer@redhat.com>2015-04-08 21:08:03 +0200
commit561052ad35d7004a6f69c772a6a2a106e436f950 (patch)
tree20bdf85312c9aa3362e3334fe657c23e93636b22 /nscd
parentc6ee40da8b7b285a644dc22b78d8e47d2bebfae6 (diff)
downloadglibc-561052ad35d7004a6f69c772a6a2a106e436f950.tar.gz
glibc-561052ad35d7004a6f69c772a6a2a106e436f950.tar.xz
glibc-561052ad35d7004a6f69c772a6a2a106e436f950.zip
nscd_getgr_r: Use struct scratch_buffer instead of extend_alloca
The lack of alloca accounting means that the old code could run out of
stack space if multiple retries are needed.
Diffstat (limited to 'nscd')
-rw-r--r--nscd/nscd_getgr_r.c18
1 files changed, 9 insertions, 9 deletions
diff --git a/nscd/nscd_getgr_r.c b/nscd/nscd_getgr_r.c
index 7e45ee59f5..d08b73f3cb 100644
--- a/nscd/nscd_getgr_r.c
+++ b/nscd/nscd_getgr_r.c
@@ -31,6 +31,7 @@
 #include <sys/un.h>
 #include <not-cancel.h>
 #include <_itoa.h>
+#include <scratch_buffer.h>
 
 #include "nscd-client.h"
 #include "nscd_proto.h"
@@ -89,7 +90,8 @@ nscd_getgr_r (const char *key, size_t keylen, request_type type,
   int gc_cycle;
   int nretries = 0;
   const uint32_t *len = NULL;
-  size_t lensize = 0;
+  struct scratch_buffer lenbuf;
+  scratch_buffer_init (&lenbuf);
 
   /* If the mapping is available, try to search there instead of
      communicating with the nscd.  */
@@ -200,14 +202,10 @@ nscd_getgr_r (const char *key, size_t keylen, request_type type,
 	  else
 	    {
 	      /* Allocate array to store lengths.  */
-	      if (lensize == 0)
-		{
-		  lensize = gr_resp.gr_mem_cnt * sizeof (uint32_t);
-		  len = (uint32_t *) alloca (lensize);
-		}
-	      else if (gr_resp.gr_mem_cnt * sizeof (uint32_t) > lensize)
-		len = extend_alloca (len, lensize,
-				     gr_resp.gr_mem_cnt * sizeof (uint32_t));
+	      if (!scratch_buffer_set_array_size
+		  (&lenbuf, gr_resp.gr_mem_cnt, sizeof (uint32_t)))
+		goto out_close;
+	      len = lenbuf.data;
 
 	      vec[0].iov_base = (void *) len;
 	      vec[0].iov_len = gr_resp.gr_mem_cnt * sizeof (uint32_t);
@@ -326,5 +324,7 @@ nscd_getgr_r (const char *key, size_t keylen, request_type type,
 	goto retry;
     }
 
+  scratch_buffer_free (&lenbuf);
+
   return retval;
 }