Просмотр исходного кода

totemsrp: fix buffer overflows for large clusters (> 100 nodes)

Signed-off-by: MORITA Kazutaka <morita.kazutaka@lab.ntt.co.jp>
Reviewed-by: Steven Dake <sdake@redhat.com>
(cherry picked from commit 1d9f444feced36ec6118b4df5560f093ec44aba8)
MORITA Kazutaka 14 лет назад
Родитель
Сommit
d1c33bbba0
1 измененных файлов с 3 добавлено и 3 удалено
  1. 3 3
      exec/totemsrp.c

+ 3 - 3
exec/totemsrp.c

@@ -508,7 +508,7 @@ struct totemsrp_instance {
 	
 	void * token_recv_event_handle;
 	void * token_sent_event_handle;
-	char commit_token_storage[9000];
+	char commit_token_storage[40000];
 };
 
 struct message_handlers {
@@ -2950,7 +2950,7 @@ static void memb_state_commit_token_create (
 
 static void memb_join_message_send (struct totemsrp_instance *instance)
 {
-	char memb_join_data[10000];
+	char memb_join_data[40000];
 	struct memb_join *memb_join = (struct memb_join *)memb_join_data;
 	char *addr;
 	unsigned int addr_idx;
@@ -3002,7 +3002,7 @@ static void memb_join_message_send (struct totemsrp_instance *instance)
 
 static void memb_leave_message_send (struct totemsrp_instance *instance)
 {
-	char memb_join_data[10000];
+	char memb_join_data[40000];
 	struct memb_join *memb_join = (struct memb_join *)memb_join_data;
 	char *addr;
 	unsigned int addr_idx;