sanchayanmaity/minix
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

VFS: fetch_name() buffer underflow (reported by John Peace, bug #305)

Browse source
This commit is contained in:
David van Moolenbroek 2009-08-29 08:22:50 +00:00
parent 4903a734b8
commit 42f0bf7dda
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
servers/vfs/utility.c
View file

@ -34,7 +34,7 @@ int flag; /* M3 means path may be in message */
* If it is not, go copy it from user space.
*/
register char *rpu, *rpm;
int r;
int r, count;
if (len > PATH_MAX) {
#if 0
@ -61,7 +61,8 @@ int flag; /* M3 means path may be in message */
/* Just copy the path from the message to 'user_fullpath'. */
rpu = &user_fullpath[0];
rpm = m_in.pathname; /* contained in input message */
do { *rpu++ = *rpm++; } while (--len);
count = len;
do { *rpu++ = *rpm++; } while (--count);
r = OK;
} else {
/* String is not contained in the message. Get it from user space. */