libburnia/legacy
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Prevented possible buffer overflow with -getfacl. Coverity CID 28695.

Browse Source
This commit is contained in:
Thomas Schmitt 2015-11-13 15:28:05 +00:00
parent eccb641c82
commit 1103a7127e
2 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
libisoburn/trunk/xorriso/iso_tree.c
View File

@ -753,7 +753,8 @@ int Xorriso_getfacl(struct XorrisO *xorriso, void *in_node, char *path,
if(pass) {
sprintf(*acl_text + strlen(*acl_text), "%s\n", cpt);
} else if(!(flag & 1)) {
Sfile_str(xorriso->result_line, cpt, 0);
if(Sfile_str(xorriso->result_line, cpt, 0) <= 0)
goto too_long;
strcat(xorriso->result_line, "\n");
Xorriso_result(xorriso, 0);
}
@ -775,8 +776,10 @@ int Xorriso_getfacl(struct XorrisO *xorriso, void *in_node, char *path,
} else {
xorriso->result_line[0]= 0;
if(what == 0)
Sfile_str(xorriso->result_line, "default:", 0);
Sfile_str(xorriso->result_line, cpt, 1);
if(Sfile_str(xorriso->result_line, "default:", 0) <= 0)
goto too_long;
if(Sfile_str(xorriso->result_line, cpt, 1) <= 0)
goto too_long;
result_len+= strlen(cpt) + 9;
}
} else
@ -800,6 +803,10 @@ int Xorriso_getfacl(struct XorrisO *xorriso, void *in_node, char *path,
ex:;
iso_node_get_acl_text(node, &text, &d_text, 1 << 15);
return(ret);
too_long:
Xorriso_msgs_submit(xorriso, 0, "Oversized ACL", 0, "FAILURE", 0);
ret= 0;
goto ex;
}

2
libisoburn/trunk/xorriso/xorriso_timestamp.h
View File

@ -1 +1 @@
#define Xorriso_timestamP "2015.11.12.160620"
#define Xorriso_timestamP "2015.11.13.152751"