summaryrefslogtreecommitdiff
path: root/libguile/frames.h
diff options
context:
space:
mode:
authorAndy Wingo <wingo@pobox.com>2017-02-08 15:05:03 +0100
committerAndy Wingo <wingo@pobox.com>2017-02-08 15:09:14 +0100
commit09a69dd712536350b4b8feec8cdec3dc49cb71d5 (patch)
treeecf2fd427208fee72efbc0e47ca2da863eee3ba2 /libguile/frames.h
parent8a4774dec8368def01af4126e77797468b0ce6de (diff)
downloadguile-09a69dd712536350b4b8feec8cdec3dc49cb71d5.tar.gz
Prevent TOCTTOU bugs in C ports
* libguile/ports-internal.h (scm_port_buffer_can_take): (scm_port_buffer_can_put): Add cur/end output arguments so that when a caller asks the buffer room, it can be relative to a fixed point in the buffer and not whatever point it's at when we go to fill it. (scm_port_buffer_did_take, scm_port_buffer_did_put): Similarly, require that the caller knows where they took/put data in the buffer. Prevents overflow. (scm_port_buffer_take_pointer, scm_port_buffer_put_pointer): Likewise, require that the caller has already checked and knows a position in the buffer and therefore how much data is available. (scm_port_buffer_take, scm_port_buffer_put, scm_port_buffer_putback): Adapt. * libguile/ports.h (scm_fill_input): Add cur/avail output arguments. * libguile/filesys.c: * libguile/poll.c: * libguile/ports.c: * libguile/r6rs-ports.c: * libguile/read.c: * libguile/rw.c: Adapt all callers. Gnarly work!
Diffstat (limited to 'libguile/frames.h')
0 files changed, 0 insertions, 0 deletions