diff options
| author | ngie <ngie@FreeBSD.org> | 2016-06-10 18:07:35 +0000 |
|---|---|---|
| committer | ngie <ngie@FreeBSD.org> | 2016-06-10 18:07:35 +0000 |
| commit | 68675c854c08cbd6aeadb624b8d2bc51a0e21fe5 (patch) | |
| tree | 662aedcd4a3104695e7cf1d49be32f6c4a2e241c /tests | |
| parent | fea5a69f20857ffb5d29a2124b16560e58384078 (diff) | |
| download | FreeBSD-src-68675c854c08cbd6aeadb624b8d2bc51a0e21fe5.zip FreeBSD-src-68675c854c08cbd6aeadb624b8d2bc51a0e21fe5.tar.gz | |
MFC r299508:
r299508 (by cem):
kern_descrip_test: Fix trivial buffer overrun with readlink(2)
CID: 1229965, 1229972
Diffstat (limited to 'tests')
| -rw-r--r-- | tests/sys/kern/kern_descrip_test.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/tests/sys/kern/kern_descrip_test.c b/tests/sys/kern/kern_descrip_test.c index 6953b00..07240d7 100644 --- a/tests/sys/kern/kern_descrip_test.c +++ b/tests/sys/kern/kern_descrip_test.c @@ -27,6 +27,7 @@ #include <sys/cdefs.h> __FBSDID("$FreeBSD$"); +#include <sys/param.h> #include <errno.h> #include <fcntl.h> #include <signal.h> @@ -170,7 +171,7 @@ ATF_TC_CLEANUP(kern_maxfiles__increase, tc) char buf[80]; if ((n = readlink(VALUE, buf, sizeof(buf))) > 0) { - buf[n] = '\0'; + buf[MIN((size_t)n, sizeof(buf) - 1)] = '\0'; if (sscanf(buf, "%d", &oldmaxfiles) == 1) { oldlen = sizeof(oldmaxfiles); (void) sysctlbyname("kern.maxfiles", NULL, 0, |
