diff options
| author | Dimitry Andric <dim@cvs.openbsd.org> | 2007-07-09 16:39:49 +0000 |
|---|---|---|
| committer | Dimitry Andric <dim@cvs.openbsd.org> | 2007-07-09 16:39:49 +0000 |
| commit | 1ca0ab2dd59e09dad217b378e6d61e14614a7b9f (patch) | |
| tree | 1b433aec50f591fb84374bdbc581304353f39328 /sbin/growfs | |
| parent | 08bfd6050b319bf088033a11a215734c539620e2 (diff) | |
Fix possible heap overflow in file(1), aka CVE-2007-1536.
When writing data into a buffer in the file_printf() function, the
length of the unused portion of the buffer is not correctly tracked,
resulting in a buffer overflow when processing certain files.
Adapted from FreeBSD's SA-07:04.file fix, with ok and some minor
tweaks from canacar@ and ray@.
Diffstat (limited to 'sbin/growfs')
0 files changed, 0 insertions, 0 deletions