diff options
author | Zach Brown <zab@redhat.com> | 2013-10-07 14:42:58 -0700 |
---|---|---|
committer | Chris Mason <chris.mason@fusionio.com> | 2013-10-16 08:23:13 -0400 |
commit | 538897923e05f9c32e58f41cf023c1da45f0d3ab (patch) | |
tree | 8413869d761c79e2ff76f83379a466dcfb1704f8 /btrfs-image.c | |
parent | 69dc09a3ce7e914111c1cf9da93021d9b5d51762 (diff) |
btrfs-progs: check link_subvol name base
In principle, link_subvol() can be given an abitrary string as the name
of the saved subvolume. It copies it into a fixed-size stack buffer and
then uses it as dirent names without testing its length.
This limits its length to BTRFS_NAME_LEN. This was found by static
analsys.
Signed-off-by: Zach Brown <zab@redhat.com>
Signed-off-by: David Sterba <dsterba@suse.cz>
Signed-off-by: Chris Mason <chris.mason@fusionio.com>
Diffstat (limited to 'btrfs-image.c')
0 files changed, 0 insertions, 0 deletions