The following commit has been merged in the openafs-stable-1_8_x branch:
commit 79a04c3448541bd8299598c5d87b404d8d2219a5
Author: Michael Meffie <[email protected]>
Date:   Mon Sep 26 11:34:57 2022 -0400

    afs: Avoid unbounded string copy in SRXAFSCB_GetLock()
    
    Use strlcpy() instead of strcpy() when filling in the lock name to avoid
    string buffer overflows of the AFSDBLock name arrays.
    
    This is a 1.8.x specific commit, derived from 419f0cd7aa (afs: Replace
    strcpy &co by safer alternatives)
    
    Change-Id: Ia59f6dccdeab1c0b6f267254bd264842568b7582
    Reviewed-on: https://gerrit.openafs.org/15151
    Tested-by: BuildBot <[email protected]>
    Reviewed-by: Cheyenne Wills <[email protected]>
    Reviewed-by: Michael Meffie <[email protected]>
    Reviewed-by: Mark Vitale <[email protected]>
    Reviewed-by: Benjamin Kaduk <[email protected]>
    Reviewed-by: Harish Sharma <[email protected]>
    Reviewed-by: Stephan Wiesand <[email protected]>

 src/afs/afs_callback.c | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

-- 
OpenAFS Master Repository
_______________________________________________
OpenAFS-cvs mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-cvs

Reply via email to