From: Goswin von Brederlow <[email protected]>
---
nbd-client.c | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
diff --git a/nbd-client.c b/nbd-client.c
index 818198e..dadf95d 100644
--- a/nbd-client.c
+++ b/nbd-client.c
@@ -136,7 +136,8 @@ void ask_list(int sock) {
uint32_t len;
uint32_t reptype;
uint64_t magic;
- char buf[1024];
+ const int BUF_SIZE = 1024;
+ char buf[BUF_SIZE];
magic = ntohll(opts_magic);
if (write(sock, &magic, sizeof(magic)) < 0)
@@ -200,10 +201,15 @@ void ask_list(int sock) {
exit(EXIT_FAILURE);
}
len=ntohl(len);
+ if (len >= BUF_SIZE) {
+ fprintf(stderr, "\nE: export name on
server too long\n");
+ exit(EXIT_FAILURE);
+ }
if(read(sock, buf, len) < 0) {
fprintf(stderr, "\nE: could not read
export name from server\n");
exit(EXIT_FAILURE);
}
+ buf[len] = 0;
printf("%s\n", buf);
}
}
--
1.7.10.4
------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite
It's a free troubleshooting tool designed for production
Get down to code-level detail for bottlenecks, with <2% overhead.
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap2
_______________________________________________
Nbd-general mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nbd-general
