| commit | 5c4bfa17f3ec46becec4b23d12323f7605ebd696 | |
| author | Dan Carpenter <error27@gmail.com> | |
| Fri, 9 Jul 2010 23:51:54 +0000 (9 23:51 +0000) | ||
| committer | David S. Miller <davem@davemloft.net> | |
| Tue, 13 Jul 2010 03:21:43 +0000 (12 20:21 -0700) | ||
| tree | 8133f3d0ef59f7198ff57cea3f813017708c3ba0 | treesnapshot (tar.gz zip) |
| parent | b31fb86815153be3bc94e8ffb9dbf6e9d7694b2d | commitdiff |
9p: strlen() doesn't count the terminator
This is an off by one bug because strlen() doesn't count the NULL
terminator. We strcpy() addr into a fixed length array of size
UNIX_PATH_MAX later on.
The addr variable is the name of the device being mounted.
CC: stable@kernel.org
Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
This is an off by one bug because strlen() doesn't count the NULL
terminator. We strcpy() addr into a fixed length array of size
UNIX_PATH_MAX later on.
The addr variable is the name of the device being mounted.
CC: stable@kernel.org
Signed-off-by: Dan Carpenter <error27@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
| net/9p/trans_fd.c | diffblobblamehistory |