]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
6314 buffer overflow in dsl_dataset_name
authoravg <avg@FreeBSD.org>
Tue, 12 Jul 2016 12:01:54 +0000 (12:01 +0000)
committeravg <avg@FreeBSD.org>
Tue, 12 Jul 2016 12:01:54 +0000 (12:01 +0000)
commitaef2281e227bbc79af479b025c378d875ac27e48
tree7c531fdc2ad3ae4a31136cef45c94528ebd671b0
parentfe3deb10890f496c9ae1421cdbbe99dd7bb21656
6314 buffer overflow in dsl_dataset_name

illumos/illumos-gate@9adfa60d484ce2435f5af77cc99dcd4e692b6660
https://github.com/illumos/illumos-gate/commit/9adfa60d484ce2435f5af77cc99dcd4e692b6660

https://www.illumos.org/issues/6314
  Callers of dsl_dataset_name pass a buffer of size ZFS_MAXNAMELEN, but
  dsl_dataset_name copies the datasets' name PLUS the snapshot name to it,
  resulting in a max of 2 * ZFS_MAXNAMELEN + '@'.

Reviewed by: George Wilson <george.wilson@delphix.com>
Reviewed by: Prakash Surya <prakash.surya@delphix.com>
Reviewed by: Igor Kozhukhov <ikozhukhov@gmail.com>
Approved by: Dan McDonald <danmcd@omniti.com>
Author: Matthew Ahrens <mahrens@delphix.com>
14 files changed:
cmd/zdb/zdb.c
cmd/zfs/zfs_main.c
cmd/zhack/zhack.c
cmd/ztest/ztest.c
lib/libzfs/common/libzfs.h
lib/libzfs/common/libzfs_changelist.c
lib/libzfs/common/libzfs_dataset.c
lib/libzfs/common/libzfs_diff.c
lib/libzfs/common/libzfs_impl.h
lib/libzfs/common/libzfs_iter.c
lib/libzfs/common/libzfs_mount.c
lib/libzfs/common/libzfs_pool.c
lib/libzfs/common/libzfs_sendrecv.c
lib/libzfs_core/common/libzfs_core.c