| commit | 9798906a426fc458b949271bcc9b8ad1608de867 | |
| author | Siddhesh Poyarekar <siddhesh@sourceware.org> | |
| Tue, 22 Dec 2020 11:48:12 +0000 (22 17:18 +0530) | ||
| committer | Siddhesh Poyarekar <siddhesh@sourceware.org> | |
| Tue, 22 Dec 2020 16:02:55 +0000 (22 21:32 +0530) | ||
| tree | 5a1246a4f139cbf9d77ae1d80d3e078ab65df498 | treesnapshot (tar.gz zip) |
| parent | a2e5da2cf471b5ac849bcd7d9960466b9cd28a35 | commitdiff |
addmntent: Remove unbounded alloca usage from getmntent [BZ#27083]
The addmntent function replicates elements of struct mnt on stack
using alloca, which is unsafe. Put characters directly into the
stream, escaping them as they're being written out.
Also add a test to check all escaped characters with addmntent and
getmntent.
The addmntent function replicates elements of struct mnt on stack
using alloca, which is unsafe. Put characters directly into the
stream, escaping them as they're being written out.
Also add a test to check all escaped characters with addmntent and
getmntent.
| misc/Makefile | diffblobblamehistory | |
| misc/mntent_r.c | diffblobblamehistory | |
| misc/tst-mntent-escape.c | [new file with mode: 0644] | blob |