
On Thu, May 06, 2010 at 04:09:25PM -0600, Eric Blake wrote:
On 05/06/2010 12:35 PM, Jim Meyering wrote:
This week we noticed that a change to struct remote_error was causing trouble (new member addition changed the size of the object being decoded -- bad for the protocol).
In order to ensure that no such changes sneak in again, I'm planning to do the following.
pdwtags src/libvirt_driver_remote_la-remote_protocol.o
prints, among other things, detailed type info for every struct:
/* 89 */ struct remote_nonnull_domain { remote_nonnull_string name; /* 0 8 */ remote_uuid uuid; /* 8 16 */ int id; /* 24 4 */
/* size: 32, cachelines: 1, members: 3 */ /* last cacheline: 32 bytes */
/* BRAIN FART ALERT! 32 != 28 + 0(holes), diff = 4 */
}; /* size: 32 */
Ouch. Architecture sizing plays a role. On a 32-bit machine, the first struct is:
/* 86 */ struct remote_nonnull_domain { remote_nonnull_string name; /* 0 4 */ remote_uuid uuid; /* 4 16 */ int id; /* 20 4 */
/* size: 24, cachelines: 1, members: 3 */ /* last cacheline: 24 bytes */ }; /* size: 24 */
Are we sure migration between 32-bit and 64-bit hypervisors works? And if it does, then these structs don't quite match what is actually sent over the wire. At any rate,
Yes, the XDR protocol encoding is architecture + wordsize independant. The struct sizes won't match what is sent on the wire, and the latter is the thing we actually need to verify. Perhaps marking all structs with __attribute__((packed)) will make then architecture invariant enough for checking of the struct to suffice. Daniel -- |: Red Hat, Engineering, London -o- http://people.redhat.com/berrange/ :| |: http://libvirt.org -o- http://virt-manager.org -o- http://deltacloud.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: GnuPG: 7D3B9505 -o- F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|