mirror_zfs/cmd
Richard Yao ba87ed1410 Fix potential buffer overflow in zpool command
The ZPOOL_SCRIPTS_PATH environment variable can be passed here. This
allows for arbitrarily long strings to be passed to sprintf(), which can
overflow the buffer.

I missed this in my earlier audit of the codebase. CodeQL's
cpp/unbounded-write check caught this.

Reviewed-by: Damian Szuberski <szuberskidamian@gmail.com>
Reviewed-by: Alexander Motin <mav@FreeBSD.org>
Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov>
Signed-off-by: Richard Yao <richard.yao@alumni.stonybrook.edu>
Closes #14264
2022-12-08 14:14:30 -08:00
..
raidz_test Fix multiplication converted to larger type 2022-10-28 09:30:37 -07:00
zdb zdb: Fix big parameter passed by value 2022-12-08 13:52:53 -08:00
zed zed: unclean disk attachment faults the vdev 2022-11-29 09:24:10 -08:00
zfs Fix GCC 12 compilation errors 2022-11-30 13:45:53 -08:00
zinject Fix unsafe string operations 2022-09-27 16:47:24 -07:00
zpool Fix potential buffer overflow in zpool command 2022-12-08 14:14:30 -08:00
zpool_influxdb Fix unchecked return values 2022-09-29 09:02:57 -07:00
zstream Add ability to recompress send streams with new compression algorithm 2022-11-10 15:23:46 -08:00
arc_summary Remove ambiguity on demand vs prefetch stats reported by arc_summary 2022-10-04 11:00:02 -07:00
arcstat.in arcstat: fix -p option 2022-08-12 14:21:52 -07:00
dbufstat.in
fsck.zfs.in
Makefile.am Add zilstat script to report zil kstats in a user friendly manner 2022-09-02 13:24:07 -07:00
mount_zfs.c
zfs_ids_to_path.c
zgenhostid.c
zhack.c Cleanup: zhack should not declare function prototypes in main() 2022-12-08 13:51:24 -08:00
zilstat.in Add zilstat script to report zil kstats in a user friendly manner 2022-09-02 13:24:07 -07:00
ztest.c Address warnings about possible division by zero from clangsa 2022-11-03 09:58:14 -07:00
zvol_wait zvol_wait logic may terminate prematurely 2022-10-11 12:12:04 -07:00