diff options
author | Alan Somers <asomers@FreeBSD.org> | 2020-09-19 19:08:27 +0000 |
---|---|---|
committer | Alan Somers <asomers@FreeBSD.org> | 2020-09-19 19:08:27 +0000 |
commit | 9ad1d357e0db6175124257156f035a043c2ced8c (patch) | |
tree | e8b4216a8d4e345587acd3d44732d15e9be313be /sbin/fsdb/fsdb.c | |
parent | c6989859ae9388eeb46a24fe88f9b8d07101c710 (diff) | |
download | src-9ad1d357e0db6175124257156f035a043c2ced8c.tar.gz src-9ad1d357e0db6175124257156f035a043c2ced8c.zip |
fix integer underflow in getgrnam_r and getpwnam_r
Sometimes nscd(8) will return a 1-byte buffer for a nonexistent entry. This
triggered an integer underflow in grp_unmarshal_func, causing getgrnam_r to
return ERANGE instead of 0.
Fix the user's buffer size check, and add a correct check for a too-small
nscd buffer.
PR: 248932
Event: September 2020 Bugathon
Reviewed by: markj
MFC after: 2 weeks
Sponsored by: Axcient
Differential Revision: https://reviews.freebsd.org/D26204
Notes
Notes:
svn path=/head/; revision=365910
Diffstat (limited to 'sbin/fsdb/fsdb.c')
0 files changed, 0 insertions, 0 deletions