Page MenuHomeFreeBSD

D44202.diff
No OneTemporary

D44202.diff

diff --git a/sys/fs/tarfs/tarfs_vfsops.c b/sys/fs/tarfs/tarfs_vfsops.c
--- a/sys/fs/tarfs/tarfs_vfsops.c
+++ b/sys/fs/tarfs/tarfs_vfsops.c
@@ -583,7 +583,8 @@
error = EINVAL;
goto bad;
}
- if (line + len > exthdr + sz) {
+ if ((uintptr_t)line + len < (uintptr_t)line ||
+ line + len > exthdr + sz) {
TARFS_DPF(ALLOC, "%s: exthdr overflow\n",
__func__);
error = EINVAL;

File Metadata

Mime Type
text/plain
Expires
Sat, Aug 22, 11:12 AM (9 h, 50 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
37074890
Default Alt Text
D44202.diff (413 B)

Event Timeline