diff options
| author | mav <mav@FreeBSD.org> | 2016-10-12 05:43:25 +0000 |
|---|---|---|
| committer | mav <mav@FreeBSD.org> | 2016-10-12 05:43:25 +0000 |
| commit | f3f275d095c2a89024db371ff7dc6e4bfb1a8013 (patch) | |
| tree | 18e8bf0d06fb9b5650896180c34645d11873411e /contrib/llvm/lib/Target/X86/X86PadShortFunction.cpp | |
| parent | 4ed177fc9a714da83875da5c0b7c181756a5821c (diff) | |
| download | FreeBSD-src-f3f275d095c2a89024db371ff7dc6e4bfb1a8013.zip FreeBSD-src-f3f275d095c2a89024db371ff7dc6e4bfb1a8013.tar.gz | |
MFC r305209: MFV r302660: 6314 buffer overflow in dsl_dataset_name
illumos/illumos-gate@9adfa60d484ce2435f5af77cc99dcd4e692b6660
https://github.com/illumos/illumos-gate/commit/9adfa60d484ce2435f5af77cc99dcd4e6
92b6660
https://www.illumos.org/issues/6314
Callers of dsl_dataset_name pass a buffer of size ZFS_MAXNAMELEN, but
dsl_dataset_name copies the datasets' name PLUS the snapshot name to it,
resulting in a max of 2 * ZFS_MAXNAMELEN + '@'.
Reviewed by: George Wilson <george.wilson@delphix.com>
Reviewed by: Prakash Surya <prakash.surya@delphix.com>
Reviewed by: Igor Kozhukhov <ikozhukhov@gmail.com>
Approved by: Dan McDonald <danmcd@omniti.com>
Author: Matthew Ahrens <mahrens@delphix.com>
Diffstat (limited to 'contrib/llvm/lib/Target/X86/X86PadShortFunction.cpp')
0 files changed, 0 insertions, 0 deletions
