On Fri, Jan 27, 2023 at 5:55 PM Maxime Coquelin <maxime.coque...@redhat.com> wrote: > > This patch fixes possible FDs leaks when truncation happens > on either the message buffer or its control data. Indeed, > by returning early, it did not let a chance to retrieve the > FDs passed as ancillary data, and so caused a potential FDs > leak. > > This patch fixes this by extracting the FDs from the > ancillary data as long as recvmsg() call succeeded. It also > improves the logs to differentiate between MSG_TRUNC and > MSG_CTRUNC.
As I mentionned offlist, I am not convinced the MSG_TRUNC flag can be set on receipt of a message, since the socket is in stream mode. I am okay to keep the check as is, but it is confusing. > > Fixes: bf472259dde6 ("vhost: fix possible denial of service by leaking FDs") > Cc: sta...@dpdk.org > > Signed-off-by: Maxime Coquelin <maxime.coque...@redhat.com> Reviewed-by: David Marchand <david.march...@redhat.com> -- David Marchand