diff options
| author | Alexander Motin <mav@FreeBSD.org> | 2016-09-01 15:08:27 +0000 |
|---|---|---|
| committer | Alexander Motin <mav@FreeBSD.org> | 2016-09-01 15:08:27 +0000 |
| commit | 41b9077ef675c307fd1112bcea26aa3aeba1bb91 (patch) | |
| tree | f27c52b6e8e48c5fa24f1c37b22bc3f2cbef83b7 /cddl/contrib/opensolaris/cmd/zhack/zhack.c | |
| parent | 9862cef0409368e9bcba5a44f8ba2ad6a2e1a4b5 (diff) | |
| parent | f728d00c4d5c4953ad98710a09778247875dccb4 (diff) | |
| download | src-41b9077ef675c307fd1112bcea26aa3aeba1bb91.tar.gz src-41b9077ef675c307fd1112bcea26aa3aeba1bb91.zip | |
MFV r302660: 6314 buffer overflow in dsl_dataset_name
illumos/illumos-gate@9adfa60d484ce2435f5af77cc99dcd4e692b6660
https://github.com/illumos/illumos-gate/commit/9adfa60d484ce2435f5af77cc99dcd4e6
92b6660
https://www.illumos.org/issues/6314
Callers of dsl_dataset_name pass a buffer of size ZFS_MAXNAMELEN, but
dsl_dataset_name copies the datasets' name PLUS the snapshot name to it,
resulting in a max of 2 * ZFS_MAXNAMELEN + '@'.
Reviewed by: George Wilson <george.wilson@delphix.com>
Reviewed by: Prakash Surya <prakash.surya@delphix.com>
Reviewed by: Igor Kozhukhov <ikozhukhov@gmail.com>
Approved by: Dan McDonald <danmcd@omniti.com>
Author: Matthew Ahrens <mahrens@delphix.com>
Notes
Notes:
svn path=/head/; revision=305209
Diffstat (limited to 'cddl/contrib/opensolaris/cmd/zhack/zhack.c')
| -rw-r--r-- | cddl/contrib/opensolaris/cmd/zhack/zhack.c | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/cddl/contrib/opensolaris/cmd/zhack/zhack.c b/cddl/contrib/opensolaris/cmd/zhack/zhack.c index f4434a1a468d..98bd1c16e576 100644 --- a/cddl/contrib/opensolaris/cmd/zhack/zhack.c +++ b/cddl/contrib/opensolaris/cmd/zhack/zhack.c @@ -48,7 +48,6 @@ #include <sys/zio_compress.h> #include <sys/zfeature.h> #include <sys/dmu_tx.h> -#undef ZFS_MAXNAMELEN #undef verify #include <libzfs.h> |