The Samba-Bugzilla – Attachment 13163 Details for
Bug 12748
use of wrong buffer in cleanupdb_store_child() leads to stack overread
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Patch in git-am format
patch.txt (text/plain), 1.11 KB, created by
Volker Lendecke
on 2017-04-19 12:04:24 UTC
(
hide
)
Description:
Patch in git-am format
Filename:
MIME Type:
Creator:
Volker Lendecke
Created:
2017-04-19 12:04:24 UTC
Size:
1.11 KB
patch
obsolete
>From 28f6264c6f20ba8971627506f1fa1534b5cd98bb Mon Sep 17 00:00:00 2001 >From: =?UTF-8?q?Hanno=20B=C3=B6ck?= <hanno@hboeck.de> >Date: Wed, 19 Apr 2017 14:00:21 +0200 >Subject: [PATCH] cleanupdb: Fix a memory read error >MIME-Version: 1.0 >Content-Type: text/plain; charset=UTF-8 >Content-Transfer-Encoding: 8bit > >Bug: https://bugzilla.samba.org/show_bug.cgi?id=12748 >Signed-off-by: Hanno Böck <hanno@hboeck.de> >Reviewed-by: Volker Lendecke <vl@samba.org> >--- > source3/lib/cleanupdb.c | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > >diff --git a/source3/lib/cleanupdb.c b/source3/lib/cleanupdb.c >index 8832abe..7bf7c7e 100644 >--- a/source3/lib/cleanupdb.c >+++ b/source3/lib/cleanupdb.c >@@ -61,7 +61,7 @@ bool cleanupdb_store_child(const pid_t pid, const bool unclean) > struct cleanup_key key = { .pid = pid }; > struct cleanup_rec rec = { .pid = pid, .unclean = unclean }; > TDB_DATA tdbkey = { .dptr = (uint8_t *)&key, .dsize = sizeof(key) }; >- TDB_DATA tdbdata = { .dptr = (uint8_t *)&key, .dsize = sizeof(rec) }; >+ TDB_DATA tdbdata = { .dptr = (uint8_t *)&rec, .dsize = sizeof(rec) }; > int result; > > db = cleanup_db(); >-- >2.1.4 >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 12748
:
13161
|
13162
|
13163
|
13164