DO NOT REPLY [Bug 7869] rsync segfault

samba-bugs at samba-bugs at
Wed Dec 15 12:32:25 MST 2010

------- Comment #3 from matt at  2010-12-15 13:32 CST -------
I see what is happening.  options.c:1496:

backup_dir_remainder = sizeof backup_dir_buf - backup_dir_len;
if (backup_dir_remainder < 32) {
        snprintf(err_buf, sizeof err_buf,
                "the --backup-dir path is WAY too long.\n");
        return 0;

But backup_dir_remainder is unsigned, so the subtraction overflows and the
error message does not trip.

Configure bugmail:
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.

More information about the rsync mailing list