[LU-10500] Buffer overflow of 'buffer' due to non null terminated string 'buffer' in llapi_search_tgt Created: 12/Jan/18 Updated: 29/Jan/22 Resolved: 29/Jan/22 |
|
| Status: | Resolved |
| Project: | Lustre |
| Component/s: | None |
| Affects Version/s: | Lustre 2.11.0 |
| Fix Version/s: | None |
| Type: | Bug | Priority: | Minor |
| Reporter: | Dmitry Eremin (Inactive) | Assignee: | WC Triage |
| Resolution: | Not a Bug | Votes: | 0 |
| Labels: | kw | ||
| Issue Links: |
|
||||||||
| Severity: | 3 | ||||||||
| Rank (Obsolete): | 9223372036854775807 | ||||||||
| Description |
int llapi_search_tgt(char *fsname, char *poolname, char *tgtname, bool is_mdt)
{
[...]
556 strncpy(buffer, param.gl_pathv[0],
557 sizeof(buffer));
[...]
566 fd = fopen(buffer, "r");
[...]
}
|