summaryrefslogtreecommitdiff
path: root/kernel/sysfile.c
diff options
context:
space:
mode:
authorRobert Morris <[email protected]>2019-09-21 04:54:25 -0400
committerRobert Morris <[email protected]>2019-09-21 04:54:25 -0400
commitd940fd122d8e04dfc1122ca6b224703eead55f66 (patch)
treeae2e6a5f2d10a6bd43532370d4c0ff70353b7a19 /kernel/sysfile.c
parent6b79ee69b799c03f939c2ffc52c30d2bcdf7f2ef (diff)
downloadxv6-labs-d940fd122d8e04dfc1122ca6b224703eead55f66.tar.gz
xv6-labs-d940fd122d8e04dfc1122ca6b224703eead55f66.tar.bz2
xv6-labs-d940fd122d8e04dfc1122ca6b224703eead55f66.zip
don't leak memory if exec() arguments are invalid.
Diffstat (limited to 'kernel/sysfile.c')
-rw-r--r--kernel/sysfile.c11
1 files changed, 8 insertions, 3 deletions
diff --git a/kernel/sysfile.c b/kernel/sysfile.c
index 5b09d93..7768d20 100644
--- a/kernel/sysfile.c
+++ b/kernel/sysfile.c
@@ -421,10 +421,10 @@ sys_exec(void)
memset(argv, 0, sizeof(argv));
for(i=0;; i++){
if(i >= NELEM(argv)){
- return -1;
+ goto bad;
}
if(fetchaddr(uargv+sizeof(uint64)*i, (uint64*)&uarg) < 0){
- return -1;
+ goto bad;
}
if(uarg == 0){
argv[i] = 0;
@@ -434,7 +434,7 @@ sys_exec(void)
if(argv[i] == 0)
panic("sys_exec kalloc");
if(fetchstr(uarg, argv[i], PGSIZE) < 0){
- return -1;
+ goto bad;
}
}
@@ -444,6 +444,11 @@ sys_exec(void)
kfree(argv[i]);
return ret;
+
+ bad:
+ for(i = 0; i < NELEM(argv) && argv[i] != 0; i++)
+ kfree(argv[i]);
+ return -1;
}
uint64