mirror of
https://git.proxmox.com/git/mirror_zfs.git
synced 2025-01-25 01:16:34 +03:00
ba87ed1410
The ZPOOL_SCRIPTS_PATH environment variable can be passed here. This allows for arbitrarily long strings to be passed to sprintf(), which can overflow the buffer. I missed this in my earlier audit of the codebase. CodeQL's cpp/unbounded-write check caught this. Reviewed-by: Damian Szuberski <szuberskidamian@gmail.com> Reviewed-by: Alexander Motin <mav@FreeBSD.org> Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov> Signed-off-by: Richard Yao <richard.yao@alumni.stonybrook.edu> Closes #14264 |
||
---|---|---|
.. | ||
raidz_test | ||
zdb | ||
zed | ||
zfs | ||
zinject | ||
zpool | ||
zpool_influxdb | ||
zstream | ||
arc_summary | ||
arcstat.in | ||
dbufstat.in | ||
fsck.zfs.in | ||
Makefile.am | ||
mount_zfs.c | ||
zfs_ids_to_path.c | ||
zgenhostid.c | ||
zhack.c | ||
zilstat.in | ||
ztest.c | ||
zvol_wait |