https://bugzilla.samba.org/show_bug.cgi?id=7057
Summary: Buffer overflow when sending a file with long name
Product: rsync
Version: 3.0.7
Platform: All
URL: https://bugzilla.redhat.com/show_bug.cgi?id=557916
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P3
Component: core
AssignedTo: [email protected]
ReportedBy: [email protected]
QAContact: [email protected]
There is a description of the issue in the bug report given in URL. What I
found out is that most likely there is a bug in function f_name(). There is no
string bounding checked when making a copy of a file path. That leads to buffer
overflow in function send1extra() and possibly in other functions. Attaching a
patch, which should be resolving this, but I'm not sure if I took the right
approach. Please check it.
--
Configure bugmail: https://bugzilla.samba.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.
--
Please use reply-all for most replies to avoid omitting the mailing list.
To unsubscribe or change options: https://lists.samba.org/mailman/listinfo/rsync
Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html
