The following commit has been merged in the openafs-stable-1_6_x branch:
commit 7eb63cd21ee57312ca71930d59f49177d80f4f2a
Author: Simon Wilkinson <[email protected]>
Date:   Sat Mar 2 10:27:47 2013 +0000

    util: Avoid overflow in GetNameByINet
    
    We copy the results of gethostbyaddr into a fixed length buffer
    without checking whether they fit. Add a length check, and use
    strlcpy to do the copy to make sure we can't overflow.
    
    Caught by coverity (#985912, #985872)
    
    Reviewed-on: http://gerrit.openafs.org/9393
    Tested-by: BuildBot <[email protected]>
    Reviewed-by: Jeffrey Altman <[email protected]>
    (cherry picked from commit fcb7974b838c2b37a8b81b88b11905c6ece398f6)
    
    Change-Id: I2d7f781c159999e721504cd6eec408db93bb703c
    Reviewed-on: http://gerrit.openafs.org/11056
    Reviewed-by: Andrew Deason <[email protected]>
    Tested-by: BuildBot <[email protected]>
    Reviewed-by: Chas Williams - CONTRACTOR <[email protected]>
    Reviewed-by: Stephan Wiesand <[email protected]>

 src/util/hostparse.c |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

-- 
OpenAFS Master Repository
_______________________________________________
OpenAFS-cvs mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-cvs

Reply via email to