Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix realpath vuln, just like SA2003-011. i do not think it attackable

Browse Source
This commit is contained in:
itojun 2003-08-06 13:36:16 +00:00
parent 7c840df334
commit 7f01f184d4
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
distrib/utils/sysinst/target.c
View File

@ -1,4 +1,4 @@
/* $NetBSD: target.c,v 1.39 2003/07/25 08:26:22 dsl Exp $ */
/* $NetBSD: target.c,v 1.40 2003/08/06 13:36:16 itojun Exp $ */
/*
* Copyright 1997 Jonathan Stone
@ -75,7 +75,7 @@
#include <sys/cdefs.h>
#if defined(LIBC_SCCS) && !defined(lint)
__RCSID("$NetBSD: target.c,v 1.39 2003/07/25 08:26:22 dsl Exp $");
__RCSID("$NetBSD: target.c,v 1.40 2003/08/06 13:36:16 itojun Exp $");
#endif
/*
@ -875,7 +875,8 @@ loop:
rootd = 0;
if (*wbuf) {
if (strlen(resolved) + strlen(wbuf) + rootd + 1 > MAXPATHLEN) {
if (strlen(resolved) + strlen(wbuf) + (rootd ? 0 : 1) + 1 >
MAXPATHLEN) {
errno = ENAMETOOLONG;
goto err1;
}