Commit 49fd4e34 authored by Zichen Xie's avatar Zichen Xie Committed by Anna Schumaker
Browse files

NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() 



name is char[64] where the size of clnt->cl_program->name remains
unknown. Invoking strcat() directly will also lead to potential buffer
overflow. Change them to strscpy() and strncat() to fix potential
issues.

Signed-off-by: default avatarZichen Xie <zichenxie0106@gmail.com>
Reviewed-by: default avatarBenjamin Coddington <bcodding@redhat.com>
Signed-off-by: default avatarAnna Schumaker <anna.schumaker@oracle.com>
parent bb504321

fs/nfs/sysfs.c

+3 −3
Original line number Diff line number Diff line
@@ -280,9 +280,9 @@ void nfs_sysfs_link_rpc_client(struct nfs_server *server, 
	char name[RPC_CLIENT_NAME_SIZE];

	int ret;



	strcpy(name, clnt->cl_program->name);

	strcat(name, uniq ? uniq : "");

	strcat(name, "_client");

	strscpy(name, clnt->cl_program->name, sizeof(name));

	strncat(name, uniq ? uniq : "", sizeof(name) - strlen(name) - 1);

	strncat(name, "_client", sizeof(name) - strlen(name) - 1);



	ret = sysfs_create_link_nowarn(&server->kobj,

						&clnt->cl_sysfs->kobject, name);