1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
samba-mirror/source3/lib/talloc_dict.c
Ralph Boehme c2de8425d9 s3:talloc_dict: fix a SIGBUS when dereferencing unaligned pointers
Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>

Autobuild-User(master): Ralph Böhme <slow@samba.org>
Autobuild-Date(master): Mon Nov 30 22:31:16 CET 2015 on sn-devel-104
2015-11-30 22:31:16 +01:00

178 lines
4.3 KiB
C

/*
Unix SMB/CIFS implementation.
Little dictionary style data structure based on dbwrap_rbt
Copyright (C) Volker Lendecke 2009
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
#include "includes.h"
#include "dbwrap/dbwrap.h"
#include "dbwrap/dbwrap_rbt.h"
#include "talloc_dict.h"
#include "util_tdb.h"
struct talloc_dict {
struct db_context *db;
};
struct talloc_dict *talloc_dict_init(TALLOC_CTX *mem_ctx)
{
struct talloc_dict *result;
result = talloc(mem_ctx, struct talloc_dict);
if (result == NULL) {
return NULL;
}
result->db = db_open_rbt(result);
if (result->db == NULL) {
TALLOC_FREE(result);
return NULL;
}
return result;
}
/*
* Add a talloced object to the dict. Nulls out the pointer to indicate that
* the talloc ownership has been taken. If an object for "key" already exists,
* the existing object is talloc_free()ed and overwritten by the new
* object. If "data" is NULL, object for key "key" is deleted. Return false
* for "no memory".
*/
bool talloc_dict_set(struct talloc_dict *dict, DATA_BLOB key, void *pdata)
{
struct db_record *rec;
NTSTATUS status = NT_STATUS_OK;
void *data = *(void **)pdata;
TDB_DATA value;
rec = dbwrap_fetch_locked(dict->db, talloc_tos(),
make_tdb_data(key.data, key.length));
if (rec == NULL) {
return false;
}
value = dbwrap_record_get_value(rec);
if (value.dsize != 0) {
void *old_data;
if (value.dsize != sizeof(void *)) {
TALLOC_FREE(rec);
return false;
}
memcpy(&old_data, value.dptr, sizeof(old_data));
TALLOC_FREE(old_data);
if (data == NULL) {
status = dbwrap_record_delete(rec);
}
}
if (data != NULL) {
void *mydata = talloc_move(dict->db, &data);
*(void **)pdata = NULL;
status = dbwrap_record_store(rec,
make_tdb_data((uint8_t *)&mydata,
sizeof(mydata)), 0);
}
TALLOC_FREE(rec);
return NT_STATUS_IS_OK(status);
}
/*
* Fetch a talloced object. If "mem_ctx!=NULL", talloc_move the object there
* and delete it from the dict.
*/
void *talloc_dict_fetch(struct talloc_dict *dict, DATA_BLOB key,
TALLOC_CTX *mem_ctx)
{
struct db_record *rec;
void *result;
TDB_DATA value;
rec = dbwrap_fetch_locked(dict->db, talloc_tos(),
make_tdb_data(key.data, key.length));
if (rec == NULL) {
return NULL;
}
value = dbwrap_record_get_value(rec);
if (value.dsize != sizeof(void *)) {
TALLOC_FREE(rec);
return NULL;
}
result = *(void **)value.dptr;
if (mem_ctx != NULL) {
NTSTATUS status;
status = dbwrap_record_delete(rec);
if (!NT_STATUS_IS_OK(status)) {
TALLOC_FREE(rec);
return NULL;
}
result = talloc_move(mem_ctx, &result);
}
return result;
}
struct talloc_dict_traverse_state {
int (*fn)(DATA_BLOB key, void *data, void *private_data);
void *private_data;
};
static int talloc_dict_traverse_fn(struct db_record *rec, void *private_data)
{
TDB_DATA key;
TDB_DATA value;
struct talloc_dict_traverse_state *state =
(struct talloc_dict_traverse_state *)private_data;
void *p;
key = dbwrap_record_get_key(rec);
value = dbwrap_record_get_value(rec);
if (value.dsize != sizeof(void *)) {
return -1;
}
memcpy(&p, value.dptr, sizeof(p));
return state->fn(data_blob_const(key.dptr, key.dsize),
p, state->private_data);
}
/*
* Traverse a talloc_dict. If "fn" returns non-null, quit the traverse
*/
int talloc_dict_traverse(struct talloc_dict *dict,
int (*fn)(DATA_BLOB key, void *data,
void *private_data),
void *private_data)
{
struct talloc_dict_traverse_state state;
NTSTATUS status;
int count = 0;
state.fn = fn;
state.private_data = private_data;
status = dbwrap_traverse(dict->db, talloc_dict_traverse_fn, &state,
&count);
if (!NT_STATUS_IS_OK(status)) {
return -1;
} else {
return count;
}
}