diff options
| author | riastradh <riastradh@NetBSD.org> | 2022-08-05 10:36:02 +0000 |
|---|---|---|
| committer | riastradh <riastradh@NetBSD.org> | 2022-08-05 10:36:02 +0000 |
| commit | 1bfb199dffe9d5bc39265bdd34d9b43c4f0d0f11 (patch) | |
| tree | de4f358ccf3f83a310276635995e8099c3595dbe /sys/fs | |
| parent | 643e511fe6a9908e1a56c85413c71cfa0429c304 (diff) | |
ptyfs: Don't copy out cookies past end of buffer.
Reported-by: syzbot+2aae7c4eddc796f917e6@syzkaller.appspotmail.com
https://syzkaller.appspot.com/bug?id=5fe24c1da952ac2ea498d745d6479bc6be91a751
Diffstat (limited to 'sys/fs')
| -rw-r--r-- | sys/fs/ptyfs/ptyfs_vnops.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/sys/fs/ptyfs/ptyfs_vnops.c b/sys/fs/ptyfs/ptyfs_vnops.c index 88efa4f6264..4219bcf346d 100644 --- a/sys/fs/ptyfs/ptyfs_vnops.c +++ b/sys/fs/ptyfs/ptyfs_vnops.c @@ -1,4 +1,4 @@ -/* $NetBSD: ptyfs_vnops.c,v 1.68 2021/12/08 20:11:54 andvar Exp $ */ +/* $NetBSD: ptyfs_vnops.c,v 1.69 2022/08/05 10:36:02 riastradh Exp $ */ /* * Copyright (c) 1993, 1995 @@ -76,7 +76,7 @@ */ #include <sys/cdefs.h> -__KERNEL_RCSID(0, "$NetBSD: ptyfs_vnops.c,v 1.68 2021/12/08 20:11:54 andvar Exp $"); +__KERNEL_RCSID(0, "$NetBSD: ptyfs_vnops.c,v 1.69 2022/08/05 10:36:02 riastradh Exp $"); #include <sys/param.h> #include <sys/systm.h> @@ -691,7 +691,7 @@ ptyfs_readdir(void *v) *ap->a_cookies = cookies; } - for (; i < 2; i++) { + for (; i < 2 && uio->uio_resid >= UIO_MX; i++) { /* `.' and/or `..' */ dp->d_fileno = PTYFS_FILENO(PTYFSroot, 0); dp->d_namlen = i + 1; |
