[Midnightbsd-cvs] src: libc/sys: The nfsclient didn't validate the length of the path

laffer1 at midnightbsd.org laffer1 at midnightbsd.org
Thu May 27 09:55:02 EDT 2010


Log Message:
-----------
The nfsclient didn't validate the length of the path passed to it.  This could cause code execution particularly when users are allowed to mount file systems.

Modified Files:
--------------
    src/sys/nfsclient:
        nfs_vfsops.c (r1.4 -> r1.5)
        (http://cvsweb.midnightbsd.org/src/sys/nfsclient/nfs_vfsops.c?r1=1.4&r2=1.5)
    src/lib/libc/sys:
        mount.2 (r1.1.1.2 -> r1.2)
        (http://cvsweb.midnightbsd.org/src/lib/libc/sys/mount.2?r1=1.1.1.2&r2=1.2)


More information about the Midnightbsd-cvs mailing list