[Bug 204643] [msdosfs] [panic] Crash while accessing files with large, non-english names

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=204643

--- Comment #7 from commit-hook at freebsd.org ---
A commit references this bug:

Author: kp
Date: Fri Apr 29 20:19:41 UTC 2016
New revision: 298799
URL: https://svnweb.freebsd.org/changeset/base/298799

Log:
  MFC r298664

  msdosfs: Prevent buffer overflow when expanding win95 names

  In win2unixfn() we expand Windows 95 style long names. In some cases that
  requires moving the data in the nbp->nb_buf buffer backwards to make room.
That
  code failed to check for overflows, leading to a stack overflow in
win2unixfn().

  We now check for this event, and mark the entire conversion as failed in that
  case. This means we present the 8 character, dos style, name instead.

  PR: 204643
  Differential Revision:      https://reviews.freebsd.org/D6015

Changes:
_U  stable/10/
  stable/10/sys/fs/msdosfs/direntry.h
  stable/10/sys/fs/msdosfs/msdosfs_conv.c

-- 
You are receiving this mail because:
You are the assignee for the bug.