Page MenuHomeFreeBSD

D44202.diff
No OneTemporary

D44202.diff

diff --git a/sys/fs/tarfs/tarfs_vfsops.c b/sys/fs/tarfs/tarfs_vfsops.c
--- a/sys/fs/tarfs/tarfs_vfsops.c
+++ b/sys/fs/tarfs/tarfs_vfsops.c
@@ -583,7 +583,8 @@
error = EINVAL;
goto bad;
}
- if (line + len > exthdr + sz) {
+ if ((uintptr_t)line + len < (uintptr_t)line ||
+ line + len > exthdr + sz) {
TARFS_DPF(ALLOC, "%s: exthdr overflow\n",
__func__);
error = EINVAL;

File Metadata

Mime Type
text/plain
Expires
Thu, Jan 9, 4:32 AM (2 h, 23 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
15729532
Default Alt Text
D44202.diff (413 B)

Event Timeline