diff options
| author | kp <kp@FreeBSD.org> | 2016-04-29 20:19:41 +0000 |
|---|---|---|
| committer | kp <kp@FreeBSD.org> | 2016-04-29 20:19:41 +0000 |
| commit | 3f7a5f21485e7540713ce7dce4f64e59f39b7bfb (patch) | |
| tree | 9f466d4b31ff87d2014e15c5ed69191dd498534b /contrib/libc++/src/regex.cpp | |
| parent | f33895ae7171cb60f5bc04b2941cb78d5621fd55 (diff) | |
| download | FreeBSD-src-3f7a5f21485e7540713ce7dce4f64e59f39b7bfb.zip FreeBSD-src-3f7a5f21485e7540713ce7dce4f64e59f39b7bfb.tar.gz | |
MFC r298664
msdosfs: Prevent buffer overflow when expanding win95 names
In win2unixfn() we expand Windows 95 style long names. In some cases that
requires moving the data in the nbp->nb_buf buffer backwards to make room. That
code failed to check for overflows, leading to a stack overflow in win2unixfn().
We now check for this event, and mark the entire conversion as failed in that
case. This means we present the 8 character, dos style, name instead.
PR: 204643
Differential Revision: https://reviews.freebsd.org/D6015
Diffstat (limited to 'contrib/libc++/src/regex.cpp')
0 files changed, 0 insertions, 0 deletions
