# [PATCH] Workaround for ai_canonname sometimes coming back as null 11 messages from 2009-04-29 to 2009-04-30. Participants: Augie Fackler, Alex Riesen, Junio C Hamano, Jon Loeliger. Thread: https://gitlist.dev/t/19132 ## Augie Fackler, 2009-04-29 21:48 Subject: [PATCH] Workaround for ai_canonname sometimes coming back as null Message-ID: <9C355DCC-0240-4B9E-83CA-083B51C2E34C@gmail.com> URL: https://gitlist.dev/e/9C355DCC-0240-4B9E-83CA-083B51C2E34C%40gmail.com ``` Fix a weird bug where git-daemon was segfaulting when started by sh(1) because ai_canonname was null. --- I'm not really sure why being started by sh has any measurable impact. git-daemon works fine if I start it manually from an interactive prompt. Easy reproduction script (the git clone command will fail reliably for me without this patch): #!/bin/sh mkdir temp cd temp mkdir narf cd narf git init echo a > a git add a git commit -am 'hi' cd .. git daemon --base-path="$(pwd)"\ --listen=127.0.0.1\ --export-all\ --pid-file=gitdaemon.pid \ --detach --reuseaddr git clone git://127.0.0.1/narf bla kill `cat gitdaemon.pid` daemon.c | 5 ++++- 1 files changed, 4 insertions(+), 1 deletions(-) diff --git a/daemon.c b/daemon.c index 13401f1..b1fede0 100644 --- a/daemon.c +++ b/daemon.c @@ -459,7 +459,10 @@ static void parse_extra_args(char *extra_args, int buflen) inet_ntop(AF_INET, &sin_addr->sin_addr, addrbuf, sizeof(addrbuf)); free(canon_hostname); - canon_hostname = xstrdup(ai->ai_canonname); + if (ai->ai_canonname) + canon_hostname = xstrdup(ai->ai_canonname); + else + canon_hostname = "unknown"; free(ip_address); ip_address = xstrdup(addrbuf); break; -- 1.6.3.rc3.12.gb7937 ``` ## Alex Riesen, 2009-04-29 21:55 Subject: Re: [PATCH] Workaround for ai_canonname sometimes coming back as null Message-ID: <81b0412b0904291455n47f83e9ftcbdec0ff1c0ea03@mail.gmail.com> URL: https://gitlist.dev/e/81b0412b0904291455n47f83e9ftcbdec0ff1c0ea03%40mail.gmail.com In-Reply-To: <9C355DCC-0240-4B9E-83CA-083B51C2E34C@gmail.com> ``` 2009/4/29 Augie Fackler : > @@ -459,7 +459,10 @@ static void parse_extra_args(char *extra_args, int > buflen) >                                inet_ntop(AF_INET, &sin_addr->sin_addr, >                                          addrbuf, sizeof(addrbuf)); >                                free(canon_hostname); > -                               canon_hostname = xstrdup(ai->ai_canonname); > +                               if (ai->ai_canonname) > +                                       canon_hostname = > xstrdup(ai->ai_canonname); > +                               else > +                                       canon_hostname = "unknown"; This last line will crash some lines down, when canon_hostname is free'd: inet_ntop(hent->h_addrtype, &sa.sin_addr, addrbuf, sizeof(addrbuf)); free(canon_hostname); /* CRASH */ canon_hostname = xstrdup(hent->h_name); free(ip_address); ``` ## Augie Fackler, 2009-04-29 21:56 Subject: Re: [PATCH] Workaround for ai_canonname sometimes coming back as null Message-ID: <6B7EA51D-8412-4E6A-BA7B-156FD5B755E8@gmail.com> URL: https://gitlist.dev/e/6B7EA51D-8412-4E6A-BA7B-156FD5B755E8%40gmail.com In-Reply-To: <81b0412b0904291455n47f83e9ftcbdec0ff1c0ea03@mail.gmail.com> ``` On Apr 29, 2009, at 4:55 PM, Alex Riesen wrote: > 2009/4/29 Augie Fackler : >> @@ -459,7 +459,10 @@ static void parse_extra_args(char *extra_args, >> int >> buflen) >> inet_ntop(AF_INET, &sin_addr- >> >sin_addr, >> addrbuf, sizeof(addrbuf)); >> free(canon_hostname); >> - canon_hostname = xstrdup(ai- >> >ai_canonname); >> + if (ai->ai_canonname) >> + canon_hostname = >> xstrdup(ai->ai_canonname); >> + else >> + canon_hostname = "unknown"; > > This last line will crash some lines down, when canon_hostname is > free'd: > > inet_ntop(hent->h_addrtype, &sa.sin_addr, > addrbuf, sizeof(addrbuf)); > > free(canon_hostname); /* CRASH */ > canon_hostname = xstrdup(hent->h_name); > free(ip_address); Odd, because I'm running with that exact code and not seeing the problem. Should I resubmit an updated patch that xstrdup's unknown into canon_hostname? ``` ## Alex Riesen, 2009-04-29 21:56 Subject: Re: [PATCH] Workaround for ai_canonname sometimes coming back as null Message-ID: <81b0412b0904291456h6e6fa2f0h840e7b3569573be0@mail.gmail.com> URL: https://gitlist.dev/e/81b0412b0904291456h6e6fa2f0h840e7b3569573be0%40mail.gmail.com In-Reply-To: <81b0412b0904291455n47f83e9ftcbdec0ff1c0ea03@mail.gmail.com> ``` 2009/4/29 Alex Riesen : > 2009/4/29 Augie Fackler : >> @@ -459,7 +459,10 @@ static void parse_extra_args(char *extra_args, int >> buflen) >>                                inet_ntop(AF_INET, &sin_addr->sin_addr, >>                                          addrbuf, sizeof(addrbuf)); >>                                free(canon_hostname); >> -                               canon_hostname = xstrdup(ai->ai_canonname); >> +                               if (ai->ai_canonname) >> +                                       canon_hostname = >> xstrdup(ai->ai_canonname); >> +                               else >> +                                       canon_hostname = "unknown"; > > This last line will crash some lines down, when canon_hostname is free'd: > Actually, it will crash in the line just above. On the same reasons. ``` ## Alex Riesen, 2009-04-29 22:01 Subject: Re: [PATCH] Workaround for ai_canonname sometimes coming back as null Message-ID: <81b0412b0904291501w501eecd4y18927018d57bdbdc@mail.gmail.com> URL: https://gitlist.dev/e/81b0412b0904291501w501eecd4y18927018d57bdbdc%40mail.gmail.com In-Reply-To: <6B7EA51D-8412-4E6A-BA7B-156FD5B755E8@gmail.com> ``` 2009/4/29 Augie Fackler : > On Apr 29, 2009, at 4:55 PM, Alex Riesen wrote: >> 2009/4/29 Augie Fackler : >>> >>> @@ -459,7 +459,10 @@ static void parse_extra_args(char *extra_args, int >>> buflen) >>>                               inet_ntop(AF_INET, &sin_addr->sin_addr, >>>                                         addrbuf, sizeof(addrbuf)); >>>                               free(canon_hostname); >>> -                               canon_hostname = >>> xstrdup(ai->ai_canonname); >>> +                               if (ai->ai_canonname) >>> +                                       canon_hostname = >>> xstrdup(ai->ai_canonname); >>> +                               else >>> +                                       canon_hostname = "unknown"; >> >> This last line will crash some lines down, when canon_hostname is free'd: >> > > Odd, because I'm running with that exact code and not seeing the problem. > Should I resubmit an updated patch that xstrdup's unknown into > canon_hostname? > I think you can just let canon_hostname be NULL (i.e. don't strdup it, if ai_canonname is NULL). NULL values of canon_hostname seem to be handled just fine: see path_ok and strbuf_expand_dict_cb (strbuf.c) ``` ## Alex Riesen, 2009-04-29 22:04 Subject: Re: [PATCH] Workaround for ai_canonname sometimes coming back as null Message-ID: <81b0412b0904291504k3261df5fl692d09c6c761887e@mail.gmail.com> URL: https://gitlist.dev/e/81b0412b0904291504k3261df5fl692d09c6c761887e%40mail.gmail.com In-Reply-To: <6B7EA51D-8412-4E6A-BA7B-156FD5B755E8@gmail.com> ``` 2009/4/29 Augie Fackler : >> >> This last line will crash some lines down, when canon_hostname is free'd: >> > > Odd, because I'm running with that exact code and not seeing the problem. Pure luck (see the message regarding "the line above". The first was bogus, of course. It is in the other leg of #ifndef NO_IPV6). The "line above" will crash should you have more than one element in gai list. ``` ## Augie Fackler, 2009-04-29 23:04 Subject: [PATCH] Don't crash if ai_canonname comes back as null Message-ID: URL: https://gitlist.dev/e/C2AC0D7A-3E11-4A3A-8447-5D7582547B13%40gmail.com In-Reply-To: <81b0412b0904291504k3261df5fl692d09c6c761887e@mail.gmail.com> ``` Fixes a weird bug where git-daemon was segfaulting when started by sh(1) because ai_canonname was null. --- Fixed based on feedback. daemon.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/daemon.c b/daemon.c index 13401f1..ae21d92 100644 --- a/daemon.c +++ b/daemon.c @@ -459,7 +459,7 @@ static void parse_extra_args(char *extra_args, int buflen) inet_ntop(AF_INET, &sin_addr->sin_addr, addrbuf, sizeof(addrbuf)); free(canon_hostname); - canon_hostname = xstrdup(ai->ai_canonname); + canon_hostname = ai->ai_canonname ? xstrdup(ai->ai_canonname) : NULL; free(ip_address); ip_address = xstrdup(addrbuf); break; -- 1.6.2.GIT ``` ## Junio C Hamano, 2009-04-29 23:21 Subject: Re: [PATCH] Don't crash if ai_canonname comes back as null Message-ID: <7v63gn59mw.fsf@gitster.siamese.dyndns.org> URL: https://gitlist.dev/e/7v63gn59mw.fsf%40gitster.siamese.dyndns.org In-Reply-To: ``` Augie Fackler writes: > Fixes a weird bug where git-daemon was segfaulting > when started by sh(1) because ai_canonname was null. > --- > Fixed based on feedback. Hmm. I've been waiting for feedback to a patch proposed earlier in the same area, which is <49F5BA55.3060606@googlemail.com> ($gmane/117670). How does this new one relate to it? > daemon.c | 2 +- > 1 files changed, 1 insertions(+), 1 deletions(-) > > diff --git a/daemon.c b/daemon.c > index 13401f1..ae21d92 100644 > --- a/daemon.c > +++ b/daemon.c > @@ -459,7 +459,7 @@ static void parse_extra_args(char *extra_args, int > buflen) > inet_ntop(AF_INET, &sin_addr->sin_addr, > addrbuf, sizeof(addrbuf)); > free(canon_hostname); > - canon_hostname = xstrdup(ai->ai_canonname); > + canon_hostname = ai->ai_canonname ? > xstrdup(ai->ai_canonname) : NULL; > free(ip_address); > ip_address = xstrdup(addrbuf); > break; > -- > 1.6.2.GIT ``` ## Augie Fackler, 2009-04-29 23:32 Subject: Re: [PATCH] Don't crash if ai_canonname comes back as null Message-ID: URL: https://gitlist.dev/e/A85E96CC-CF0B-40F9-9960-00485285E6ED%40gmail.com In-Reply-To: <7v63gn59mw.fsf@gitster.siamese.dyndns.org> ``` On Apr 29, 2009, at 6:21 PM, Junio C Hamano wrote: > Augie Fackler writes: > >> Fixes a weird bug where git-daemon was segfaulting >> when started by sh(1) because ai_canonname was null. >> --- >> Fixed based on feedback. > > Hmm. > > I've been waiting for feedback to a patch proposed earlier in the same > area, which is <49F5BA55.3060606@googlemail.com> ($gmane/117670). How > does this new one relate to it? I can't comment much on the correctness of the code - my patch was the minimal change to have it not crash. The other patch also works for me to prevent the crash, and looks like it might be a little more correct in terms of having a meaningful hostname. >> daemon.c | 2 +- >> 1 files changed, 1 insertions(+), 1 deletions(-) >> >> diff --git a/daemon.c b/daemon.c >> index 13401f1..ae21d92 100644 >> --- a/daemon.c >> +++ b/daemon.c >> @@ -459,7 +459,7 @@ static void parse_extra_args(char *extra_args, >> int >> buflen) >> inet_ntop(AF_INET, &sin_addr->sin_addr, >> addrbuf, sizeof(addrbuf)); >> free(canon_hostname); >> - canon_hostname = xstrdup(ai->ai_canonname); >> + canon_hostname = ai->ai_canonname ? >> xstrdup(ai->ai_canonname) : NULL; >> free(ip_address); >> ip_address = xstrdup(addrbuf); >> break; >> -- >> 1.6.2.GIT > ``` ## Jon Loeliger, 2009-04-30 14:13 Subject: Re: [PATCH] Don't crash if ai_canonname comes back as null Message-ID: URL: https://gitlist.dev/e/E1LzX1N-0003sw-2y%40jdl.com In-Reply-To: ``` > > On Apr 29, 2009, at 6:21 PM, Junio C Hamano wrote: > > > Augie Fackler writes: > > > >> Fixes a weird bug where git-daemon was segfaulting > >> when started by sh(1) because ai_canonname was null. > >> --- > >> Fixed based on feedback. > > > > Hmm. > > > > I've been waiting for feedback to a patch proposed earlier in the same > > area, which is <49F5BA55.3060606@googlemail.com> ($gmane/117670). How > > does this new one relate to it? > > I can't comment much on the correctness of the code - my patch was the > minimal change to have it not crash. > > The other patch also works for me to prevent the crash, and looks like > it might be a little more correct in terms of having a meaningful > hostname. So, I wasn't CC'ed on the referenced patch ($gmane/117670), but it seems to me that there might be value in actually looping over the whole list of addrinfo results exactly in the case that it does return a null canonical name for one of its addresses? Perhaps an inverse call to getnameinfo() is warranted too? Sorry, I'm just not certain here. jdl ``` ## Junio C Hamano, 2009-04-30 16:57 Subject: Re: [PATCH] Don't crash if ai_canonname comes back as null Message-ID: <7viqkm5bc0.fsf@gitster.siamese.dyndns.org> URL: https://gitlist.dev/e/7viqkm5bc0.fsf%40gitster.siamese.dyndns.org In-Reply-To: ``` Jon Loeliger writes: >> > I've been waiting for feedback to a patch proposed earlier in the same >> > area, which is <49F5BA55.3060606@googlemail.com> ($gmane/117670). How >> > does this new one relate to it? >> ... > So, I wasn't CC'ed on the referenced patch ($gmane/117670), but it You did got CC'ed, but I got a bounce from your freescale address, so this time I tried another address of yours I knew about. > seems to me that there might be value in actually looping over the > whole list of addrinfo results exactly in the case that it does > return a null canonical name for one of its addresses? That is what I speculated when commenting on ($gmane/117670), but I think the original loop was not doing any check, and instead always exited early during its first iteration. Perhaps we can re-add a loop that does something useful, but I do not know what it would be offhand. > Perhaps an > inverse call to getnameinfo() is warranted too? In this case the name being looked up is _ours_; it is not like "the client claims to be frotz---does frotz reverse map to him correctly?" situation, so reverse lookup might not be so interesting. There is one thing that could potentially be useful when the daemon runs on a multi-homed host; git.jdl.com may have eth1 facing public and eth0 facing internal networks. Depending on which address you got the request to, you may want to serve different contents, and if you got request to "hostname" that is not you as far as getaddrinfo() is concerned, you may want to do yet another thing that is different from the two name-addr mapping returned by getaddrinfo(). I do not see enough information to do that kind of thing is passed to the parse_extra_args() function in the current callchain, though. We do have a call to getpeername() but we do not seem to do getsockname() to learn about our end of the connection. ```