[Bug 214881] jail with path=/ and sysctl.disablefullpath=1 leads to NULL dereference

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=214881

Konstantin Belousov <kib at FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jamie at FreeBSD.org,
                   |                            |kib at FreeBSD.org

--- Comment #1 from Konstantin Belousov <kib at FreeBSD.org> ---
(In reply to aler from comment #0)
I suspect that this is just a thinko, the case path == NULL is handled later. 
OTOH, it is not clear to me that path == NULL should result in the '0' addend
to len in the check.

If you do consider the right action to be cleanup, then the failing len check
already provides an example what to do.  Anyway, I am attaching patch with
simple additional check for path == NULL.

-- 
You are receiving this mail because:
You are the assignee for the bug.