Date: Mon, 28 Jul 2008 15:12:31 +0400 (MSD) From: Chagin Dmitry <chagin.dmitry@gmail.com> To: Chagin Dmitry <chagin.dmitry@gmail.com> Cc: Alexander Leidinger <Alexander@leidinger.net>, freebsd-emulation@freebsd.org Subject: Re: kern/117010: [linux] linux_getdents() get somethinng like buffer overflow Message-ID: <alpine.BSF.1.10.0807281508380.1594@ora.chd.net> In-Reply-To: <alpine.BSF.1.10.0807281300060.1453@ora.chd.net> References: <200807250700.m6P70FSF036132@freefall.freebsd.org> <20080726091045.4c617dc7@deskjail> <alpine.BSF.1.10.0807271958020.3912@ora.chd.net> <20080728085403.58063b2gbchdjtic@webmail.leidinger.net> <alpine.BSF.1.10.0807281300060.1453@ora.chd.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 28 Jul 2008, Chagin Dmitry wrote:
>
> agree, we should do check before calculating linuxreclen, like:
>
> if (bdp->d_namlen > LINUX_NAME_MAX) {
> error = ENAMETOOLONG;
> goto out;
> }
>
d_namlen declared as uint8_t, so comparison is always false. lets's
leave it will not changed FreeBSD d_namlen type?
--
Have fun!
chd
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.1.10.0807281508380.1594>