The following commit has been merged in the openafs-stable-1_6_x branch:
commit da3dc59ce087ff2128a96f4dbf171e7ec38af218
Author: Simon Wilkinson <[email protected]>
Date:   Sat Mar 2 10:15:10 2013 +0000

    rmtsys: Don't overflow pathname buffer
    
    When we're constructing a homedirectory path to look for the
    .AFSSERVER file in, we copy the HOME environment variable into a
    static buffer, with a risk of overflowing that buffer.
    
    Instead of using a static buffer, just allocate one with asprintf.
    
    Caught by coverity (#985910)
    
    Reviewed-on: http://gerrit.openafs.org/9392
    Tested-by: BuildBot <[email protected]>
    Reviewed-by: Derrick Brashear <[email protected]>
    Reviewed-by: Jeffrey Altman <[email protected]>
    (cherry picked from commit f322b0ff1ec44d713c23d567f4d304e3dc65e702)
    
    Change-Id: I588fecf4caee64915fc2e7730f68f051d6faa92a
    Reviewed-on: http://gerrit.openafs.org/11043
    Reviewed-by: Andrew Deason <[email protected]>
    Tested-by: BuildBot <[email protected]>
    Reviewed-by: Chas Williams - CONTRACTOR <[email protected]>
    Reviewed-by: Stephan Wiesand <[email protected]>

 src/sys/rmtsysc.c |    9 +++++++--
 1 files changed, 7 insertions(+), 2 deletions(-)

-- 
OpenAFS Master Repository
_______________________________________________
OpenAFS-cvs mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-cvs

Reply via email to