[Bug 204643] [msdosfs] [panic] Crash while accessing files with large, non-english names

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sun Mar 13 04:20:43 UTC 2016


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=204643

--- Comment #3 from Kristof Provost <kp at freebsd.org> ---
Created attachment 168071
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=168071&action=edit
msdosfs: Prevent buffer overflow when expanding win95 names

My initial analysis seems to have missed a different overflow, in win2unixfn().
It looks like dos2unixfn() is probably safe, because it's unlikely that an
expansion of 8 or 12 bytes will take more than 255 bytes.

Can you test the attached patch? It should fix the panic you're seeing.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-fs mailing list