https://bugzilla.samba.org/show_bug.cgi?id=7057





------- Comment #7 from [email protected]  2010-03-23 19:32 CST -------
Created an attachment (id=5529)
 --> (https://bugzilla.samba.org/attachment.cgi?id=5529&action=view)
Reproducer

I think I found the problem, and no, it isn't fixed by the proposed patch.  If
send_directory is called with dlen == MAXPATHLEN - 1, it will append a slash
and then write a null byte just beyond the buffer.  Attached is a reproducer. 
I reproduced the fortify failure on i686.  For some reason I did not get a
fortify failure on x86_64, but I got a valgrind error if I changed the buffer
to be heap allocated.


-- 
Configure bugmail: https://bugzilla.samba.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.
-- 
Please use reply-all for most replies to avoid omitting the mailing list.
To unsubscribe or change options: https://lists.samba.org/mailman/listinfo/rsync
Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html

Reply via email to