[Bug 13112] receive_xattr heap overread with non null terminated name

samba-bugs at samba.org samba-bugs at samba.org
Sun Nov 5 19:48:34 UTC 2017


https://bugzilla.samba.org/show_bug.cgi?id=13112

Wayne Davison <wayned at samba.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #2 from Wayne Davison <wayned at samba.org> ---
The name_len value is set to include the terminating null char, e.g.:
    name_len = strlen(name) + 1;

I tweaked the read code to validate that the read value is null-terminated, and
die if it is not.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.



More information about the rsync mailing list