SocketAncillary doesn't ensure the control buffer is aligned at least as much as cmsghdr
Open
Nobody has claimed this yet.
A-io
C-bug
F-unix_socket_ancillary_data
O-unix
T-libs
- Dominant language
- Rust
- Stars
- 119k
- Forks
- 16.1k
- PR merge metrics
- PR metrics pending
Description
SocketAncillary accepts an arbitrary slice as input even if the slice is not correctly aligned to cmsghdr. This is unsound.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the SocketAncillary implementation and reading how its control buffer is accepted and used with cmsghdr. Check for existing socket-related tests, then verify that an arbitrary input slice cannot violate cmsghdr alignment requirements; done means the unsound alignment case is prevented.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- networking
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100