From: Jonathan Calmels Date: Mon, 11 Dec 2017 22:49:57 +0000 (-0800) Subject: overlay: fix out-of-bounds copy X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e0d498f1da8e51e99745bd8fd70fc0c53d7ea3db;p=thirdparty%2Flxc.git overlay: fix out-of-bounds copy Signed-off-by: Jonathan Calmels --- diff --git a/src/lxc/storage/overlay.c b/src/lxc/storage/overlay.c index 6b93eb03b..d71bc75f7 100644 --- a/src/lxc/storage/overlay.c +++ b/src/lxc/storage/overlay.c @@ -410,15 +410,12 @@ int ovl_create(struct lxc_storage *bdev, const char *dest, const char *n, return -1; } - delta = malloc(len + 1); + delta = strdup(dest); if (!delta) { ERROR("Failed to allocate memory"); return -1; } - - memcpy(delta, dest, len); memcpy(delta + len - 6, "delta0", sizeof("delta0") - 1); - delta[len + sizeof("delta0")] = '\0'; ret = mkdir_p(delta, 0755); if (ret < 0) {