fdisk: bb_common_bufsiz1 is too small for globals on 64-bit CPU

1 files changed, 177 insertions, 175 deletions

diff --git a/util-linux/fdisk.c b/util-linux/fdisk.c
index 493c6740b..9d7bd4e2c 100644
--- a/util-linux/fdisk.c
+++ b/util-linux/fdisk.c
@@ -16,6 +16,8 @@
 # define USE_FEATURE_FDISK_BLKSIZE(a)
 #endif
 
+#define SIZE(a) (sizeof(a)/sizeof((a)[0]))
+
 #define DEFAULT_SECTOR_SIZE     512
 #define MAX_SECTOR_SIZE 2048
 #define SECTOR_SIZE     512     /* still used in osf/sgi/sun code */
@@ -32,14 +34,6 @@
 #define LINUX_LVM       0x8e
 #define LINUX_RAID      0xfd
 
-#define IS_EXTENDED(i) \
-        ((i) == EXTENDED || (i) == WIN98_EXTENDED || (i) == LINUX_EXTENDED)
-
-#define SIZE(a) (sizeof(a)/sizeof((a)[0]))
-
-#define cround(n)       (display_in_cyl_units ? ((n)/units_per_sector)+1 : (n))
-#define scround(x)      (((x)+units_per_sector-1)/units_per_sector)
-
 struct hd_geometry {
         unsigned char heads;
         unsigned char sectors;
@@ -91,6 +85,7 @@ enum failure {
 enum label_type {
         label_dos, label_sun, label_sgi, label_aix, label_osf
 };
+
 #define LABEL_IS_DOS    (label_dos == current_label_type)
 
 #if ENABLE_FEATURE_SUN_LABEL
@@ -150,30 +145,6 @@ static int get_boot(enum action what);
 #define PLURAL   0
 #define SINGULAR 1
 
-#define hex_val(c)      ({ \
-                                char _c = (c); \
-                                isdigit(_c) ? _c - '0' : \
-                                tolower(_c) + 10 - 'a'; \
-                        })
-
-#define LINE_LENGTH     80
-#define pt_offset(b, n) ((struct partition *)((b) + 0x1be + \
-                                (n) * sizeof(struct partition)))
-#define sector(s)       ((s) & 0x3f)
-#define cylinder(s, c)  ((c) | (((s) & 0xc0) << 2))
-
-#define hsc2sector(h,s,c) (sector(s) - 1 + sectors * \
-                                ((h) + heads * cylinder(s,c)))
-#define set_hsc(h,s,c,sector) \
-        do { \
-                s = sector % sectors + 1;  \
-                sector /= sectors;         \
-                h = sector % heads;        \
-                sector /= heads;           \
-                c = sector & 0xff;         \
-                s |= (sector >> 2) & 0xc0; \
-        } while (0)
-
 static unsigned get_start_sect(const struct partition *p);
 static unsigned get_nr_sects(const struct partition *p);
 
@@ -188,25 +159,190 @@ static unsigned get_nr_sects(const struct partition *p);
 struct pte {
         struct partition *part_table;   /* points into sectorbuffer */
         struct partition *ext_pointer;  /* points into sectorbuffer */
+        off_t offset;           /* disk sector number */
+        char *sectorbuffer;     /* disk sector contents */
 #if ENABLE_FEATURE_FDISK_WRITABLE
         char changed;           /* boolean */
 #endif
-        off_t offset;           /* disk sector number */
-        char *sectorbuffer;     /* disk sector contents */
 };
 
+/* DOS partition types */
+
+static const char *const i386_sys_types[] = {
+        "\x00" "Empty",
+        "\x01" "FAT12",
+        "\x04" "FAT16 <32M",
+        "\x05" "Extended",         /* DOS 3.3+ extended partition */
+        "\x06" "FAT16",            /* DOS 16-bit >=32M */
+        "\x07" "HPFS/NTFS",        /* OS/2 IFS, eg, HPFS or NTFS or QNX */
+        "\x0a" "OS/2 Boot Manager",/* OS/2 Boot Manager */
+        "\x0b" "Win95 FAT32",
+        "\x0c" "Win95 FAT32 (LBA)",/* LBA really is 'Extended Int 13h' */
+        "\x0e" "Win95 FAT16 (LBA)",
+        "\x0f" "Win95 Ext'd (LBA)",
+        "\x11" "Hidden FAT12",
+        "\x12" "Compaq diagnostics",
+        "\x14" "Hidden FAT16 <32M",
+        "\x16" "Hidden FAT16",
+        "\x17" "Hidden HPFS/NTFS",
+        "\x1b" "Hidden Win95 FAT32",
+        "\x1c" "Hidden W95 FAT32 (LBA)",
+        "\x1e" "Hidden W95 FAT16 (LBA)",
+        "\x3c" "Part.Magic recovery",
+        "\x41" "PPC PReP Boot",
+        "\x42" "SFS",
+        "\x63" "GNU HURD or SysV", /* GNU HURD or Mach or Sys V/386 (such as ISC UNIX) */
+        "\x80" "Old Minix",        /* Minix 1.4a and earlier */
+        "\x81" "Minix / old Linux",/* Minix 1.4b and later */
+        "\x82" "Linux swap",       /* also Solaris */
+        "\x83" "Linux",
+        "\x84" "OS/2 hidden C: drive",
+        "\x85" "Linux extended",
+        "\x86" "NTFS volume set",
+        "\x87" "NTFS volume set",
+        "\x8e" "Linux LVM",
+        "\x9f" "BSD/OS",           /* BSDI */
+        "\xa0" "Thinkpad hibernation",
+        "\xa5" "FreeBSD",          /* various BSD flavours */
+        "\xa6" "OpenBSD",
+        "\xa8" "Darwin UFS",
+        "\xa9" "NetBSD",
+        "\xab" "Darwin boot",
+        "\xb7" "BSDI fs",
+        "\xb8" "BSDI swap",
+        "\xbe" "Solaris boot",
+        "\xeb" "BeOS fs",
+        "\xee" "EFI GPT",                    /* Intel EFI GUID Partition Table */
+        "\xef" "EFI (FAT-12/16/32)",         /* Intel EFI System Partition */
+        "\xf0" "Linux/PA-RISC boot",         /* Linux/PA-RISC boot loader */
+        "\xf2" "DOS secondary",              /* DOS 3.3+ secondary */
+        "\xfd" "Linux raid autodetect",      /* New (2.2.x) raid partition with
+                                                autodetect using persistent
+                                                superblock */
+#if 0 /* ENABLE_WEIRD_PARTITION_TYPES */
+        "\x02" "XENIX root",
+        "\x03" "XENIX usr",
+        "\x08" "AIX",              /* AIX boot (AIX -- PS/2 port) or SplitDrive */
+        "\x09" "AIX bootable",     /* AIX data or Coherent */
+        "\x10" "OPUS",
+        "\x18" "AST SmartSleep",
+        "\x24" "NEC DOS",
+        "\x39" "Plan 9",
+        "\x40" "Venix 80286",
+        "\x4d" "QNX4.x",
+        "\x4e" "QNX4.x 2nd part",
+        "\x4f" "QNX4.x 3rd part",
+        "\x50" "OnTrack DM",
+        "\x51" "OnTrack DM6 Aux1", /* (or Novell) */
+        "\x52" "CP/M",             /* CP/M or Microport SysV/AT */
+        "\x53" "OnTrack DM6 Aux3",
+        "\x54" "OnTrackDM6",
+        "\x55" "EZ-Drive",
+        "\x56" "Golden Bow",
+        "\x5c" "Priam Edisk",
+        "\x61" "SpeedStor",
+        "\x64" "Novell Netware 286",
+        "\x65" "Novell Netware 386",
+        "\x70" "DiskSecure Multi-Boot",
+        "\x75" "PC/IX",
+        "\x93" "Amoeba",
+        "\x94" "Amoeba BBT",       /* (bad block table) */
+        "\xa7" "NeXTSTEP",
+        "\xbb" "Boot Wizard hidden",
+        "\xc1" "DRDOS/sec (FAT-12)",
+        "\xc4" "DRDOS/sec (FAT-16 < 32M)",
+        "\xc6" "DRDOS/sec (FAT-16)",
+        "\xc7" "Syrinx",
+        "\xda" "Non-FS data",
+        "\xdb" "CP/M / CTOS / ...",/* CP/M or Concurrent CP/M or
+                                      Concurrent DOS or CTOS */
+        "\xde" "Dell Utility",     /* Dell PowerEdge Server utilities */
+        "\xdf" "BootIt",           /* BootIt EMBRM */
+        "\xe1" "DOS access",       /* DOS access or SpeedStor 12-bit FAT
+                                      extended partition */
+        "\xe3" "DOS R/O",          /* DOS R/O or SpeedStor */
+        "\xe4" "SpeedStor",        /* SpeedStor 16-bit FAT extended
+                                      partition < 1024 cyl. */
+        "\xf1" "SpeedStor",
+        "\xf4" "SpeedStor",        /* SpeedStor large partition */
+        "\xfe" "LANstep",          /* SpeedStor >1024 cyl. or LANstep */
+        "\xff" "BBT",              /* Xenix Bad Block Table */
+#endif
+        NULL
+};
+
+
+/* Globals */
+
 struct globals {
+        char *line_ptr;
+        char line_buffer[80];
+        char partname_buffer[80];
+        jmp_buf listingbuf;
         /* Raw disk label. For DOS-type partition tables the MBR,
          * with descriptions of the primary partitions. */
         char MBRbuffer[MAX_SECTOR_SIZE];
         /* Partition tables */
         struct pte ptes[MAXIMUM_PARTS];
 };
+/* bb_common_bufsiz1 is too small for this on 64 bit CPUs */
+#define G (*ptr_to_globals)
+
+#define line_ptr        (G.line_ptr)
+#define listingbuf      (G.listingbuf)
+#define line_buffer     (G.line_buffer)
+#define partname_buffer (G.partname_buffer)
+#define MBRbuffer       (G.MBRbuffer)
+#define ptes            (G.ptes)
+
+
+/* Code */
+
+#define IS_EXTENDED(i) \
+        ((i) == EXTENDED || (i) == WIN98_EXTENDED || (i) == LINUX_EXTENDED)
 
-#define G (*(struct globals*)bb_common_bufsiz1)
-#define MBRbuffer (G.MBRbuffer)
-#define ptes      (G.ptes)
+#define cround(n)       (display_in_cyl_units ? ((n)/units_per_sector)+1 : (n))
+
+#define scround(x)      (((x)+units_per_sector-1)/units_per_sector)
 
+#define pt_offset(b, n) \
+        ((struct partition *)((b) + 0x1be + (n) * sizeof(struct partition)))
+
+#define sector(s)       ((s) & 0x3f)
+
+#define cylinder(s, c)  ((c) | (((s) & 0xc0) << 2))
+
+#define hsc2sector(h,s,c) \
+        (sector(s) - 1 + sectors * ((h) + heads * cylinder(s,c)))
+
+#define set_hsc(h,s,c,sector) \
+        do { \
+                s = sector % sectors + 1;  \
+                sector /= sectors;         \
+                h = sector % heads;        \
+                sector /= heads;           \
+                c = sector & 0xff;         \
+                s |= (sector >> 2) & 0xc0; \
+        } while (0)
+
+/* read line; return 0 or first printable char */
+static int
+read_line(const char *prompt)
+{
+        int sz;
+
+        sz = read_line_input(prompt, line_buffer, sizeof(line_buffer), NULL);
+        if (sz <= 0)
+                exit(0); /* Ctrl-D or Ctrl-C */
+
+        if (line_buffer[sz-1] == '\n')
+                line_buffer[--sz] = '\0';
+
+        line_ptr = line_buffer;
+        while (*line_ptr && !isgraph(*line_ptr))
+                line_ptr++;
+        return *line_ptr;
+}
 
 /*
  * return partition name - uses static storage
@@ -214,14 +350,13 @@ struct globals {
 static const char *
 partname(const char *dev, int pno, int lth)
 {
-        static char buffer[80];
         const char *p;
         int w, wp;
         int bufsiz;
         char *bufp;
 
-        bufp = buffer;
-        bufsiz = sizeof(buffer);
+        bufp = partname_buffer;
+        bufsiz = sizeof(partname_buffer);
 
         w = strlen(dev);
         p = "";
@@ -292,28 +427,6 @@ write_part_table_flag(char *b)
         b[511] = 0xaa;
 }
 
-static char line_buffer[LINE_LENGTH];
-static char *line_ptr;
-
-/* read line; return 0 or first printable char */
-static int
-read_line(const char *prompt)
-{
-        int sz;
-
-        sz = read_line_input(prompt, line_buffer, sizeof(line_buffer), NULL);
-        if (sz <= 0)
-                exit(0); /* Ctrl-D or Ctrl-C */
-
-        if (line_buffer[sz-1] == '\n')
-                line_buffer[--sz] = '\0';
-
-        line_ptr = line_buffer;
-        while (*line_ptr && !isgraph(*line_ptr))
-                line_ptr++;
-        return *line_ptr;
-}
-
 static char
 read_nonempty(const char *mesg)
 {
@@ -439,112 +552,6 @@ STATIC_SUN void verify_sun(void);
 STATIC_SUN void sun_write_table(void);
 #include "fdisk_sun.c"
 
-/* DOS partition types */
-
-static const char *const i386_sys_types[] = {
-        "\x00" "Empty",
-        "\x01" "FAT12",
-        "\x04" "FAT16 <32M",
-        "\x05" "Extended",         /* DOS 3.3+ extended partition */
-        "\x06" "FAT16",            /* DOS 16-bit >=32M */
-        "\x07" "HPFS/NTFS",        /* OS/2 IFS, eg, HPFS or NTFS or QNX */
-        "\x0a" "OS/2 Boot Manager",/* OS/2 Boot Manager */
-        "\x0b" "Win95 FAT32",
-        "\x0c" "Win95 FAT32 (LBA)",/* LBA really is 'Extended Int 13h' */
-        "\x0e" "Win95 FAT16 (LBA)",
-        "\x0f" "Win95 Ext'd (LBA)",
-        "\x11" "Hidden FAT12",
-        "\x12" "Compaq diagnostics",
-        "\x14" "Hidden FAT16 <32M",
-        "\x16" "Hidden FAT16",
-        "\x17" "Hidden HPFS/NTFS",
-        "\x1b" "Hidden Win95 FAT32",
-        "\x1c" "Hidden W95 FAT32 (LBA)",
-        "\x1e" "Hidden W95 FAT16 (LBA)",
-        "\x3c" "Part.Magic recovery",
-        "\x41" "PPC PReP Boot",
-        "\x42" "SFS",
-        "\x63" "GNU HURD or SysV", /* GNU HURD or Mach or Sys V/386 (such as ISC UNIX) */
-        "\x80" "Old Minix",        /* Minix 1.4a and earlier */
-        "\x81" "Minix / old Linux",/* Minix 1.4b and later */
-        "\x82" "Linux swap",       /* also Solaris */
-        "\x83" "Linux",
-        "\x84" "OS/2 hidden C: drive",
-        "\x85" "Linux extended",
-        "\x86" "NTFS volume set",
-        "\x87" "NTFS volume set",
-        "\x8e" "Linux LVM",
-        "\x9f" "BSD/OS",           /* BSDI */
-        "\xa0" "Thinkpad hibernation",
-        "\xa5" "FreeBSD",          /* various BSD flavours */
-        "\xa6" "OpenBSD",
-        "\xa8" "Darwin UFS",
-        "\xa9" "NetBSD",
-        "\xab" "Darwin boot",
-        "\xb7" "BSDI fs",
-        "\xb8" "BSDI swap",
-        "\xbe" "Solaris boot",
-        "\xeb" "BeOS fs",
-        "\xee" "EFI GPT",                    /* Intel EFI GUID Partition Table */
-        "\xef" "EFI (FAT-12/16/32)",         /* Intel EFI System Partition */
-        "\xf0" "Linux/PA-RISC boot",         /* Linux/PA-RISC boot loader */
-        "\xf2" "DOS secondary",              /* DOS 3.3+ secondary */
-        "\xfd" "Linux raid autodetect",      /* New (2.2.x) raid partition with
-                                                autodetect using persistent
-                                                superblock */
-#if 0 /* ENABLE_WEIRD_PARTITION_TYPES */
-        "\x02" "XENIX root",
-        "\x03" "XENIX usr",
-        "\x08" "AIX",              /* AIX boot (AIX -- PS/2 port) or SplitDrive */
-        "\x09" "AIX bootable",     /* AIX data or Coherent */
-        "\x10" "OPUS",
-        "\x18" "AST SmartSleep",
-        "\x24" "NEC DOS",
-        "\x39" "Plan 9",
-        "\x40" "Venix 80286",
-        "\x4d" "QNX4.x",
-        "\x4e" "QNX4.x 2nd part",
-        "\x4f" "QNX4.x 3rd part",
-        "\x50" "OnTrack DM",
-        "\x51" "OnTrack DM6 Aux1", /* (or Novell) */
-        "\x52" "CP/M",             /* CP/M or Microport SysV/AT */
-        "\x53" "OnTrack DM6 Aux3",
-        "\x54" "OnTrackDM6",
-        "\x55" "EZ-Drive",
-        "\x56" "Golden Bow",
-        "\x5c" "Priam Edisk",
-        "\x61" "SpeedStor",
-        "\x64" "Novell Netware 286",
-        "\x65" "Novell Netware 386",
-        "\x70" "DiskSecure Multi-Boot",
-        "\x75" "PC/IX",
-        "\x93" "Amoeba",
-        "\x94" "Amoeba BBT",       /* (bad block table) */
-        "\xa7" "NeXTSTEP",
-        "\xbb" "Boot Wizard hidden",
-        "\xc1" "DRDOS/sec (FAT-12)",
-        "\xc4" "DRDOS/sec (FAT-16 < 32M)",
-        "\xc6" "DRDOS/sec (FAT-16)",
-        "\xc7" "Syrinx",
-        "\xda" "Non-FS data",
-        "\xdb" "CP/M / CTOS / ...",/* CP/M or Concurrent CP/M or
-                                      Concurrent DOS or CTOS */
-        "\xde" "Dell Utility",     /* Dell PowerEdge Server utilities */
-        "\xdf" "BootIt",           /* BootIt EMBRM */
-        "\xe1" "DOS access",       /* DOS access or SpeedStor 12-bit FAT
-                                      extended partition */
-        "\xe3" "DOS R/O",          /* DOS R/O or SpeedStor */
-        "\xe4" "SpeedStor",        /* SpeedStor 16-bit FAT extended
-                                      partition < 1024 cyl. */
-        "\xf1" "SpeedStor",
-        "\xf4" "SpeedStor",        /* SpeedStor large partition */
-        "\xfe" "LANstep",          /* SpeedStor >1024 cyl. or LANstep */
-        "\xff" "BBT",              /* Xenix Bad Block Table */
-#endif
-        NULL
-};
-
-
 #if ENABLE_FEATURE_FDISK_WRITABLE
 /* start_sect and nr_sects are stored little endian on all machines */
 /* moreover, they are not aligned correctly */
@@ -615,8 +622,6 @@ static off_t extended_offset;            /* offset of link pointers */
 static unsigned long long total_number_of_sectors;
 
 
-static jmp_buf listingbuf;
-
 static void fdisk_fatal(enum failure why)
 {
         const char *message;
@@ -2379,7 +2384,7 @@ new_partition(void)
                         printf("You must delete some partition and add "
                                  "an extended partition first\n");
         } else {
-                char c, line[LINE_LENGTH];
+                char c, line[80];
                 snprintf(line, sizeof(line),
                         "Command action\n"
                         "   %s\n"
@@ -2761,8 +2766,6 @@ unknown_command(int c)
 }
 #endif
 
-void BUG_fdisk_globals_overflow(void);
-
 int fdisk_main(int argc, char **argv);
 int fdisk_main(int argc, char **argv)
 {
@@ -2786,8 +2789,7 @@ int fdisk_main(int argc, char **argv)
                 OPT_s = (1 << 6) * ENABLE_FEATURE_FDISK_BLKSIZE,
         };
 
-        if (sizeof(G) > sizeof(bb_common_bufsiz1))
-                BUG_fdisk_globals_overflow();
+        PTR_TO_GLOBALS = xzalloc(sizeof(G));
 
         opt = getopt32(argc, argv, "b:C:H:lS:u" USE_FEATURE_FDISK_BLKSIZE("s"),
                                 &str_b, &str_C, &str_H, &str_S);