Page MenuHomeFreeBSD

Coverity fixes in fusefs(5)
ClosedPublic

Authored by asomers on Aug 29 2019, 5:06 PM.
Tags
None
Referenced Files
F165776175: D21466.id61760.diff
Sun, Aug 9, 6:55 PM
F165750148: D21466.id61459.diff
Sun, Aug 9, 3:43 PM
Unknown Object (File)
Sun, Aug 9, 2:50 PM
Unknown Object (File)
Mon, Jul 27, 1:15 PM
Unknown Object (File)
Fri, Jul 24, 6:05 PM
Unknown Object (File)
Fri, Jul 24, 1:28 PM
Unknown Object (File)
Wed, Jul 22, 10:15 AM
Unknown Object (File)
Tue, Jul 21, 1:28 PM
Subscribers

Details

Summary

Coverity fixes in fusefs(5)

CID 1404532 fixes a signed vs unsigned comparison error in fuse_vnop_bmap.
It could potentially have resulted in VOP_BMAP reporting too many
consecutive blocks.

CID 1404364 is much worse. It was an array access by an untrusted,
user-provided variable. It could potentially have resulted in a malicious
file system crashing the kernel or worse.

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

emaste added a subscriber: emaste.
emaste added inline comments.
sys/fs/fuse/fuse_internal.c
393 ↗(On Diff #61459)

namelen includes the '\0' presumably

This revision is now accepted and ready to land.Sep 6 2019, 2:26 PM
This revision was automatically updated to reflect the committed changes.