| From: David Miller <da...@davemloft.net>
| From: "D. Hugh Redelmeier" <h...@mimosa.com>
| Date: Wed, 9 Sep 2015 16:24:07 -0400 (EDT)
| > 1) netlink(3) says that the type of the second parameter is "int".
| > From the synopsis:
| > int NLMSG_OK(struct nlmsghdr *nlh, int len);
| > Surely then "int" should be appropriate.
|
| Documentation can, and often is, wrong. The code that has been there
| for more than two decades determines what the interface and semantics
| actually are.
|
| Whatever is actually in the macro is what people have to accomodate
| and cope with.
That's pretty scary. Especially since I've found that more than half
the files in Fedora that used the macor used a signed type.
Thanks for responding to the start of my message. Here's the rest
again in case you missed it.
2) if you use the type "unsigned int" on a 32-bit machine, you get the
warning for an earlier conjunct:
#define NLMSG_OK(nlh,len) ((len) >= (int)sizeof(struct nlmsghdr) && \
(nlh)->nlmsg_len >= sizeof(struct nlmsghdr) && \
(nlh)->nlmsg_len <= (len))
(len) >= (int)sizeof(struct nlmsghdr) <=== unsigned >= int
3) on a 32-bit machine, size_t is likely "unsigned int" so the
same problem as (2) should arise.
4) on a 64-bit machine with 64-bit ints, the same problems are likely.
I don't have one to test on.
Casting to "short" or "unsigned short" works, but I don't know that
the value is guaranteed to fit in either of them.
| I'm not applying this, sorry.
Thanks for looking at this. Could you reconsider?
An alternative would be to change netlink(3) to say that len is
of type ssize_t or size_t (there are arguments for each). This would
be cleaner, but it would be an API change (at least in theory). The
macro would still have to be changed, just in a different way.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majord...@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
