freebsd-dev/lib
Andriy Gapon f728d00c4d 6314 buffer overflow in dsl_dataset_name
illumos/illumos-gate@9adfa60d48
9adfa60d48

https://www.illumos.org/issues/6314
  Callers of dsl_dataset_name pass a buffer of size ZFS_MAXNAMELEN, but
  dsl_dataset_name copies the datasets' name PLUS the snapshot name to it,
  resulting in a max of 2 * ZFS_MAXNAMELEN + '@'.

Reviewed by: George Wilson <george.wilson@delphix.com>
Reviewed by: Prakash Surya <prakash.surya@delphix.com>
Reviewed by: Igor Kozhukhov <ikozhukhov@gmail.com>
Approved by: Dan McDonald <danmcd@omniti.com>
Author: Matthew Ahrens <mahrens@delphix.com>
2016-07-12 12:01:54 +00:00
..
libctf/common Update vendor/illumos/dist to 14148:fe28bd725808: 2013-08-23 23:34:54 +00:00
libdtrace 4470 overly aggressive D integer narrowing breaks 32-bit ustack helpers 2014-06-03 01:55:27 +00:00
libgen/common Update DTrace userland code to the latest available. 2010-08-02 12:13:33 +00:00
libnvpair 5005 libnvpair JSON output broken by lint fixes 2014-12-05 23:43:15 +00:00
libuutil/common Update vendor/illumos/dist to pre libzfs_core state (zfs part) 2012-07-18 10:19:51 +00:00
libzfs/common 6314 buffer overflow in dsl_dataset_name 2016-07-12 12:01:54 +00:00
libzfs_core/common 6314 buffer overflow in dsl_dataset_name 2016-07-12 12:01:54 +00:00
libzpool/common 6739 userland version of cv_timedwait_hires() always assumes absolute time 2016-04-02 08:24:23 +00:00
pyzfs/common 4369 implement zfs bookmarks 2014-01-01 01:15:53 +00:00