[lxc-devel] [lxc/lxc] a17fa3: fix possible buffer overflow

GitHub noreply at github.com
Wed Mar 30 23:44:38 UTC 2016


  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: a17fa3c081a2a2e2ec692ed8decaf54470d05dce
      https://github.com/lxc/lxc/commit/a17fa3c081a2a2e2ec692ed8decaf54470d05dce
  Author: Niklas Eiling <niklas.eiling at rwth-aachen.de>
  Date:   2016-03-30 (Wed, 30 Mar 2016)

  Changed paths:
    M src/lxc/criu.c

  Log Message:
  -----------
  fix possible buffer overflow
strncat only returns its first argument and not the end of the written string.
Thus "buf-pos" is always 0 and consquently no range check is performed.

Signed-off-by: Niklas Eiling <niklas.eiling at rwth-aachen.de>


  Commit: 72a30576da6f59f7d6ef9452bae78ec1ec4feea0
      https://github.com/lxc/lxc/commit/72a30576da6f59f7d6ef9452bae78ec1ec4feea0
  Author: Niklas Eiling <niklas.eiling at rwth-aachen.de>
  Date:   2016-03-30 (Wed, 30 Mar 2016)

  Changed paths:
    M src/lxc/criu.c

  Log Message:
  -----------
  use snprintf instead of strncat

Signed-off-by: Niklas Eiling <niklas.eiling at rwth-aachen.de>


  Commit: a495e1fd3faaf7c86497472b26bf32d7c816a734
      https://github.com/lxc/lxc/commit/a495e1fd3faaf7c86497472b26bf32d7c816a734
  Author: Serge Hallyn <serge at hallyn.com>
  Date:   2016-03-30 (Wed, 30 Mar 2016)

  Changed paths:
    M src/lxc/criu.c

  Log Message:
  -----------
  Merge pull request #932 from n-eiling/criu-log-fix

fix possible buffer overflow


Compare: https://github.com/lxc/lxc/compare/24d6495f0dc8...a495e1fd3faa


More information about the lxc-devel mailing list