]> git.ipfire.org Git - thirdparty/ipxe.git/commit
projects / thirdparty / ipxe.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e0a2ca9) | patch
[nfs] Fix off-by-one heap overflow in nfs_uri_symlink() 1661/head
authorTheodore Riera <warsang@hotmail.com>
Thu, 4 Jun 2026 11:15:12 +0000 (12:15 +0100)
committerMichael Brown <mcb30@ipxe.org>
Thu, 4 Jun 2026 11:15:12 +0000 (12:15 +0100)
commitce6ad2be0272df2e0188edcb8c3ed35f41103f8c
tree77d3d1546112e27ad2ff32488f09079d3e354d11tree | snapshot
parente0a2ca984f2a5a96c5bc7e7012e23348e9030c24commit | diff
[nfs] Fix off-by-one heap overflow in nfs_uri_symlink()

The length calculations in nfs_uri_symlink() omitted space for the
NUL terminator, causing strcpy() to write one byte past the heap
allocation.

Signed-off-by: Theodore Riera <warsang@hotmail.com>
src/net/oncrpc/nfs_uri.c diff | blob | blame | history
Mirror of https://github.com/ipxe/ipxe.git