diff options
author | Robert Morris <[email protected]> | 2019-09-21 04:54:25 -0400 |
---|---|---|
committer | Robert Morris <[email protected]> | 2019-09-21 04:54:25 -0400 |
commit | d940fd122d8e04dfc1122ca6b224703eead55f66 (patch) | |
tree | ae2e6a5f2d10a6bd43532370d4c0ff70353b7a19 /kernel/sysfile.c | |
parent | 6b79ee69b799c03f939c2ffc52c30d2bcdf7f2ef (diff) | |
download | xv6-labs-d940fd122d8e04dfc1122ca6b224703eead55f66.tar.gz xv6-labs-d940fd122d8e04dfc1122ca6b224703eead55f66.tar.bz2 xv6-labs-d940fd122d8e04dfc1122ca6b224703eead55f66.zip |
don't leak memory if exec() arguments are invalid.
Diffstat (limited to 'kernel/sysfile.c')
-rw-r--r-- | kernel/sysfile.c | 11 |
1 files changed, 8 insertions, 3 deletions
diff --git a/kernel/sysfile.c b/kernel/sysfile.c index 5b09d93..7768d20 100644 --- a/kernel/sysfile.c +++ b/kernel/sysfile.c @@ -421,10 +421,10 @@ sys_exec(void) memset(argv, 0, sizeof(argv)); for(i=0;; i++){ if(i >= NELEM(argv)){ - return -1; + goto bad; } if(fetchaddr(uargv+sizeof(uint64)*i, (uint64*)&uarg) < 0){ - return -1; + goto bad; } if(uarg == 0){ argv[i] = 0; @@ -434,7 +434,7 @@ sys_exec(void) if(argv[i] == 0) panic("sys_exec kalloc"); if(fetchstr(uarg, argv[i], PGSIZE) < 0){ - return -1; + goto bad; } } @@ -444,6 +444,11 @@ sys_exec(void) kfree(argv[i]); return ret; + + bad: + for(i = 0; i < NELEM(argv) && argv[i] != 0; i++) + kfree(argv[i]); + return -1; } uint64 |