prefetch-pioctls-overflow-20001104

1024 was being used of a buffer which wasn't that large.

diff --git a/src/afs/afs_daemons.c b/src/afs/afs_daemons.c
index 4026b3d09b8bde72a1a33f2dc028193208070630..766d57cb170c9da900dd93667ee3e17c8cf2d702 100644 (file)
--- a/src/afs/afs_daemons.c
+++ b/src/afs/afs_daemons.c
@@ -358,7 +358,7 @@ void BPath(ab)
     code = gop_lookupname((char *)ab->parm[0], AFS_UIOSYS, 1,  (struct vnode **) 0, (struct vnode **)&tvn);
 #endif
     AFS_GLOCK();
-    osi_FreeSmallSpace((char *)ab->parm[0]); /* free path name buffer here */
+    osi_FreeLargeSpace((char *)ab->parm[0]); /* free path name buffer here */
     if (code) return;
     /* now path may not have been in afs, so check that before calling our cache manager */
     if (!tvn || !IsAfsVnode((struct vnode *) tvn)) {

diff --git a/src/afs/afs_pioctl.c b/src/afs/afs_pioctl.c
index 5688d72df16e79919b8400bfe1458a04821ccddb..ef7320378a85f232067439e4726bfaefd75a45d7 100644 (file)
--- a/src/afs/afs_pioctl.c
+++ b/src/afs/afs_pioctl.c
@@ -1942,14 +1942,14 @@ struct AFS_UCRED *acred;
 
     AFS_STATCNT(Prefetch);
     if (!apath) return EINVAL;
-    tp = osi_AllocSmallSpace(AFS_SMALLOCSIZ);
+    tp = osi_AllocLargeSpace(1024);
     AFS_COPYINSTR(apath, tp, 1024, &bufferSize, code);
     if (code) {
-       osi_FreeSmallSpace(tp);
+       osi_FreeLargeSpace(tp);
        return code;
     }
     if (afs_BBusy()) { /* do this as late as possible */
-       osi_FreeSmallSpace(tp);
+       osi_FreeLargeSpace(tp);
        return EWOULDBLOCK;     /* pretty close */
     }
     afs_BQueue(BOP_PATH, (struct vcache*)0, 0, 0, acred, (long)tp, 0L, 0L, 0L);