freebsd-skq/sys/fs/msdosfs
Kristof Provost 66527f742b msdosfs: Prevent buffer overflow when expanding win95 names
In win2unixfn() we expand Windows 95 style long names. In some cases that
requires moving the data in the nbp->nb_buf buffer backwards to make room. That
code failed to check for overflows, leading to a stack overflow in win2unixfn().

We now check for this event, and mark the entire conversion as failed in that
case. This means we present the 8 character, dos style, name instead.

PR: 204643
Differential Revision:	https://reviews.freebsd.org/D6015
2016-04-26 20:36:32 +00:00
..
bootsect.h
bpb.h
denode.h
direntry.h msdosfs: Prevent buffer overflow when expanding win95 names 2016-04-26 20:36:32 +00:00
fat.h
msdosfs_conv.c msdosfs: Prevent buffer overflow when expanding win95 names 2016-04-26 20:36:32 +00:00
msdosfs_denode.c ANSIfy sys/fs/msdosfs 2015-01-09 14:50:08 +00:00
msdosfs_fat.c fs misc: for pointers replace 0 with NULL. 2016-04-15 17:28:24 +00:00
msdosfs_fileno.c ANSIfy sys/fs/msdosfs 2015-01-09 14:50:08 +00:00
msdosfs_iconv.c
msdosfs_lookup.c fs misc: for pointers replace 0 with NULL. 2016-04-15 17:28:24 +00:00
msdosfs_vfsops.c sys: extend use of the howmany() macro when available. 2016-04-26 15:38:17 +00:00
msdosfs_vnops.c msdosfs_rename: yet another unused value. 2016-02-07 15:36:16 +00:00
msdosfsmount.h msdosfs: mark unused compat-mount fields 2015-03-22 09:09:26 +00:00