]> rtime.felk.cvut.cz Git - lisovros/qemu_apohw.git/commit
fsdev: Fix overrun after readlink() fills buffer completely
authorMarkus Armbruster <armbru@redhat.com>
Fri, 21 Feb 2014 16:43:09 +0000 (17:43 +0100)
committerAneesh Kumar K.V <aneesh.kumar@linux.vnet.ibm.com>
Wed, 26 Feb 2014 06:54:07 +0000 (12:24 +0530)
commitd77f7779b4d74354b3444ceb0f93105ced3c26c8
tree29588786a2274c0b4a3099eead1b6c5f5942c351
parentd5001cf787ad0514839a81d0f2e771e01e076e21
fsdev: Fix overrun after readlink() fills buffer completely

readlink() returns the number of bytes written to the buffer, and it
doesn't write a terminating null byte.  do_readlink() writes it
itself.  Overruns the buffer when readlink() filled it completely.

Fix by reserving space for the null byte when calling readlink(), like
we do elsewhere.

Signed-off-by: Markus Armbruster <armbru@redhat.com>
Signed-off-by: Aneesh Kumar K.V <aneesh.kumar@linux.vnet.ibm.com>
fsdev/virtfs-proxy-helper.c