Fix an off-by-one error from r351961
That revision addressed a Coverity CID that could lead to a buffer overflow, but it had an off-by-one error in the buffer size check. Reported by: Coverity Coverity CID: 1405530 MFC after: 3 days MFC-With: 351961 Sponsored by: The FreeBSD Foundation
This commit is contained in:
parent
0917480bfd
commit
eadbc9bd79
@ -390,7 +390,7 @@ fuse_internal_invalidate_entry(struct mount *mp, struct uio *uio)
|
||||
if ((err = uiomove(&fnieo, sizeof(fnieo), uio)) != 0)
|
||||
return (err);
|
||||
|
||||
if (fnieo.namelen > sizeof(name))
|
||||
if (fnieo.namelen >= sizeof(name))
|
||||
return (EINVAL);
|
||||
|
||||
if ((err = uiomove(name, fnieo.namelen, uio)) != 0)
|
||||
|
Loading…
x
Reference in New Issue
Block a user