DO NOT REPLY [Bug 7869] rsync segfault

[samba-bugs at samba.org]

https://bugzilla.samba.org/show_bug.cgi?id=7869





------- Comment #4 from jr-sambabugzilla at quo.to  2010-12-15 14:01 CST -------
There's also potential for a one-off overflow here:

  } else if (backup_dir_buf[backup_dir_len - 1] != '/') {
          backup_dir_buf[backup_dir_len++] = '/';
          backup_dir_buf[backup_dir_len] = '\0';
  }

backup_dir_len is incremented, but there is no corresponding decrement of
backup_dir_remainder.


-- 
Configure bugmail: https://bugzilla.samba.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.