Displaying 3 results from an estimated 3 matches for "sanp".
Did you mean:
sane
2017 Oct 27
1
[Bug 13105] New: 1byte heap overflow in sanitize_path
...est=0x0, p=0x60200000ebb0 "",
rootdir=0x4f51e0 "", depth=0, flags=1) at util.c:1009
1011 if (dest != p) {
1012 int plen = strlen(p); <-- returns 0
1023 } else if (!(dest = new_array(char, rlen + plen + 1))) <-- 1 byte
requested
1037 start = sanp = dest + rlen;
1073 if (sanp == dest) {
1074 /* ended up with nothing, so put in "." component */
1075 *sanp++ = '.';
1076 }
1077 *sanp = '\0'; <-- overwrite by 1
The patch I've attached will ensures that at least 2 bytes are allocate...
2004 Aug 12
0
security hole in non-chroot rsync daemon
...to apply this one-word patch to the sanitize_path()
function in util.c:
--- orig/util.c 2004-04-27 12:59:37 -0700
+++ util.c 2004-08-11 23:37:27 -0700
@@ -743,7 +743,7 @@
allowdotdot = 1;
} else {
p += 2;
- if (*p == '/')
+ while (*p == '/')
p++;
if (sanp != start) {
/* back up sanp one level */
This bug is fixed in the CVS version of rsync, and will be released in
version 2.6.3 (which will begin release-testing soon).
One potential fix that doesn't require recompiling rsync is to set
"use chroot = true" for all the modules in...
2008 Apr 12
2
merge an lvm snapshot back
So how does one accomplish this if say the snap is now deemed the copy of interest? I am hoping dd is not the only answer:)
Thanks!
jlc