Andrey Ryabinin 179a5bc4b8 net/9p: use memcpy() instead of snprintf() in p9_mount_tag_show() ...

p9_mount_tag_show() uses '%s' format string to print
non-NULL terminated chan->tag string. This leads
to out of bounds memory read, because format '%s'
implies that string is NULL-terminated.

The length of string is know here, so its simpler and safer
to use memcpy instead of snprintf().

Signed-off-by: Andrey Ryabinin <a.ryabinin@samsung.com>
Signed-off-by: Dominique Martinet <dominique.martinet@cea.fr>
Signed-off-by: Eric Van Hensbergen <ericvh@gmail.com>

2015-03-20 07:34:43 -07:00

..

client.c

9P: remove unnecessary break after return

2014-07-15 16:27:00 -07:00

error.c

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

Kconfig

net/9p: remove depends on CONFIG_EXPERIMENTAL

2013-01-11 11:39:33 -08:00

Makefile

…

mod.c

…

protocol.c

9p: use unsigned integers for nwqid/count

2015-03-20 07:34:42 -07:00

protocol.h

…

trans_common.c

9p: fix off by one causing access violations and memory corruption

2013-07-11 11:36:02 -07:00

trans_common.h

…

trans_fd.c

9p: remove unused variable in p9_fd_create()

2015-03-20 07:34:41 -07:00

trans_rdma.c

9pnet_rdma: check token type before int conversion

2014-03-25 16:38:19 -05:00

trans_virtio.c

net/9p: use memcpy() instead of snprintf() in p9_mount_tag_show()

2015-03-20 07:34:43 -07:00

util.c

net/9p: convert to idr_alloc()

2013-02-27 19:10:20 -08:00