CA-406953: avoid pointer truncation and use of uninitialized values

edwintorok · Feb 21, 2025 · b081c08 · b081c08
6 parents f1f263d + ed3aaf7 + a3cfaa2 + 3cd2d4f + ae864a3 + 1d279d5
commit b081c08
Show file tree

Hide file tree

Showing 4 changed files with 6 additions and 5 deletions.
diff --git a/daemon/bond_mon.c b/daemon/bond_mon.c
@@ -358,6 +358,7 @@ bm_initialize(
         com_close(bm_object);
         bm_object = HA_COMMON_OBJECT_INVALID_HANDLE_VALUE;
 #endif
+        ret = MTC_ERROR_INVALID_PARAMETER;
 
         break;
     }

diff --git a/daemon/watchdog.c b/daemon/watchdog.c
@@ -994,7 +994,7 @@ watchdog_selffence(void)
     log_message(MTC_LOG_INFO, "watchdog_selffence.\n");
 
     // Attempt to shutdown domain 0 immediately
-    do_domain_shutdown_self(ret);
+    do_domain_shutdown_self(MTC_ERROR_HB_FENCEREQUESTED);
     // We shouldn't get here but if we do then invoke the watchdog:
 
     if (instance_num == 0)

diff --git a/include/mtctypes.h b/include/mtctypes.h
@@ -54,7 +54,7 @@
 //
 
 #include <sys/time.h>
-
+#include <stddef.h>
 
 //
 //
@@ -442,8 +442,7 @@ MTC_ASSERT_SIZE(sizeof (void *) == MTC_POINTER_SIZE);
 
 #define _rounddiv(num, div)     (((num) + (div) - 1) / (div))
 #define _roundup(num, div)      (_rounddiv(num, div) * (div))
-#define _struct_offset(structname, element) \
-                                ((unsigned int)&(((structname *)0)->element))
+#define _struct_offset(structname, element) offsetof(structname, element)
 
 #ifndef _min
 #define _min(X, Y)      ((X < Y)? (X): (Y))

diff --git a/lib/statefileio.c b/lib/statefileio.c
@@ -39,6 +39,7 @@
 #include <assert.h>
 #include <errno.h>
 #include <pthread.h>
+#include <stdint.h>
 #include <signal.h>
 #include <string.h>
 #include <unistd.h>
@@ -354,7 +355,7 @@ sf_checksum(
 {
     MTC_U32 sum = 0;
 
-    assert((((MTC_U32)p) & 3) == 0 && (((MTC_U32)end) & 3) == 0);
+    assert((((uintptr_t)p) & 3) == 0 && (((uintptr_t)end) & 3) == 0);
 
     while (p < end)
     {
-Original file line number
+Diff line change
@@ Expand Up / @@ -358,6 +358,7 @@ bm_initialize( @@
             com_close(bm_object);
             bm_object = HA_COMMON_OBJECT_INVALID_HANDLE_VALUE;
     #endif
+            ret = MTC_ERROR_INVALID_PARAMETER;
             break;
         }
@@ Expand Down @@