Attachment 5258 Details for Bug 7081 – Patch for master/3.5.0.

[patch] Patch for master/3.5.0.

look (text/plain), 1.29 KB, created by Jeremy Allison on 2010-02-02 16:16:37 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jeremy Allison

Created: 2010-02-02 16:16:37 UTC

Size: 1.29 KB

patch

obsolete

>diff --git a/source3/modules/vfs_expand_msdfs.c b/source3/modules/vfs_expand_msdfs.c
>index 9edd0f6..177ebdb 100644
>--- a/source3/modules/vfs_expand_msdfs.c
>+++ b/source3/modules/vfs_expand_msdfs.c
>@@ -173,11 +173,17 @@ static int expand_msdfs_readlink(struct vfs_handle_struct *handle,
> 	TALLOC_CTX *ctx = talloc_tos();
> 	int result;
> 	char *target = TALLOC_ARRAY(ctx, char, PATH_MAX+1);
>+	size_t len;
> 
> 	if (!target) {
> 		errno = ENOMEM;
> 		return -1;
> 	}
>+	if (bufsiz == 0) {
>+		errno = EINVAL;
>+		return -1;
>+	}
>+
> 	result = SMB_VFS_NEXT_READLINK(handle, path, target,
> 				       PATH_MAX);
> 
>@@ -186,7 +192,7 @@ static int expand_msdfs_readlink(struct vfs_handle_struct *handle,
> 
> 	target[result] = '\0';
> 
>-	if ((strncmp(target, "msdfs:", strlen("msdfs:")) == 0) &&
>+	if ((strncmp(target, "msdfs:", 6) == 0) &&
> 	    (strchr_m(target, '@') != NULL)) {
> 		target = expand_msdfs_target(ctx, handle->conn, target);
> 		if (!target) {
>@@ -195,8 +201,15 @@ static int expand_msdfs_readlink(struct vfs_handle_struct *handle,
> 		}
> 	}
> 
>-	safe_strcpy(buf, target, bufsiz-1);
>-	return strlen(buf);
>+	len = MIN(bufsiz, strlen(target));
>+	if (len) {
>+		memcpy(buf, target, len);
>+	} else {
>+		errno = ENOENT;
>+		return -1;
>+	}
>+	TALLOC_FREE(target);
>+	return len;
> }
> 
> static struct vfs_fn_pointers vfs_expand_msdfs_fns = {

Actions: View

Attachments on bug 7081: 5258 | 5263 | 5264 | 5267 | 5268