Home • About Us • A-Z Index • Search * Contact Us • Register • Login • Press • Shop

The Open Brand -- Problem Reporting and Interpretations System

Problem Report 2544 Details

Help Show help | Quick Search | Submit a Test Suite Support Request | Click here to view your privileges

This page provides all information on Problem Report 2544.

Report 2544 Actions

    Problem Report Number 2544
    Submitter's Classification Test Suite problem
    State Resolved
    Resolution Test Suite Deficiency (TSD)
    Problem Resolution ID TSD.X.1313
    Raised 2008-12-19 10:42
    Updated 2009-01-05 14:18
    Published 2009-01-05 14:18
    Product Standard Internationalised System Calls and Libraries Extended V3 (UNIX 03)
    Certification Program The Open Brand certification program
    Test Suite VSX4 version 4.6.9
    Test Identification /tset/XPG4.os/ipc/semctl/T.semctl 17,18
    Problem Summary Buffer overflow in T.semctl 17 and 18
    Problem Text Initialization of the mtext field in the mbuf structure prior to a
    msgsnd(2) may overrun the
    buffer.

    The mbuf structure is defined as:
    struct mbuf {
    long mtype;
    char mtext[MSGSZ];
    };

    When mtext is initialized via strncpy(3), the specified allowable size
    exceeds the buffer size:
    (void)strncpy(msg.mtext,MSGOK,MSGSZ+1);

    This results in a crash of the process performing the msgsnd(2), and the
    subsequent failure
    to receive a message as seen in the test output.
    Test Output /tset/XPG4.os/ipc/semctl/T.semctl,17,UNRESOLVED
    /tset/XPG4.os/ipc/semctl/T.semctl,18,UNRESOLVED


    ************************************************************************
    /tset/XPG4.os/ipc/semctl/T.semctl 17 Unresolved

    Test Description:
    When the process has read permission, a call to
    semctl(semid,semnum,GETNCNT,arg) returns the number of processes
    which
    are waiting for the value associated with the semaphore
    referenced by
    semid and semnum to increase from its current value.

    Test Information:
    msgrcv() unexpectedly failed, error: ENOMSG


    ************************************************************************


    ************************************************************************
    /tset/XPG4.os/ipc/semctl/T.semctl 18 Unresolved

    Test Description:
    When the process has read permission, a call to
    semctl(semid,semnum,GETZCNT,arg) returns the number of processes
    which
    are waiting for the value associated with the semaphore
    referenced by
    semid and semnum to become zero.

    Test Information:
    msgrcv() unexpectedly failed, error: ENOMSG


    ************************************************************************

    Review Information

    Review Type TSMA Review
    Start Date 2008-12-19 10:42
    Last Updated 2008-12-19 18:03
    Completed 2008-12-19 18:03
    Status Complete
    Review Recommendation Test Suite Deficiency (TSD)
    Review Response This is accepted as a fault in the test suite.

    Review Type SA Review
    Start Date 2008-12-19 18:03
    Last Updated 2009-01-05 14:17
    Completed 2009-01-05 14:17
    Status Complete
    Review Resolution Test Suite Deficiency (TSD)
    Review Conclusion This is accepted as a fault with the test suite. A test suite deficiency
    is granted.

    Problem Reporting System Options:

     

    Back   

Contact the Certification Authority