[Bug 204643] [msdosfs] [panic] Crash while accessing files with large, non-english names

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=204643

--- Comment #6 from commit-hook at freebsd.org ---
A commit references this bug:

Author: kp
Date: Tue Apr 26 20:36:32 UTC 2016
New revision: 298664
URL: https://svnweb.freebsd.org/changeset/base/298664

Log:
  msdosfs: Prevent buffer overflow when expanding win95 names

  In win2unixfn() we expand Windows 95 style long names. In some cases that
  requires moving the data in the nbp->nb_buf buffer backwards to make room.
That
  code failed to check for overflows, leading to a stack overflow in
win2unixfn().

  We now check for this event, and mark the entire conversion as failed in that
  case. This means we present the 8 character, dos style, name instead.

  PR: 204643
  Differential Revision:        https://reviews.freebsd.org/D6015

Changes:
  head/sys/fs/msdosfs/direntry.h
  head/sys/fs/msdosfs/msdosfs_conv.c

-- 
You are receiving this mail because:
You are the assignee for the bug.