Differential D30778
dtrace: fix an out of bound read and a NULL pointer increment Authored by domagoj.stolfa_gmail.com on Jun 15 2021, 8:20 PM. Tags Referenced Files
Subscribers None
Details
In dt_cc.c when the provider is an empty string, accessing strlen(pdp->dtpd_provider) - 1 will result in a pdp->dtpd_provider[-1] access. Similarly, in dt_ident.c, if p2 is a NULL pointer, doing a p2++ on it is undefined behaviour. Signed-off-by: Domagoj Stolfa <domagoj.stolfa@gmail.com>
Diff Detail
Event TimelineComment Actions If there are any tags, e.g., sponsored by, please add them to the review description and I'll commit.
Comment Actions You can add a Signed-off-by: domagoj.stolfa@gmail.com if you'd like and a Sponsored by: Google. Thanks! Comment Actions I prefer not to since we don't have a policy around it, at least not yet. If you prefer to have it, then I'll keep it. Comment Actions That's fine -- no need to put it in then. Just a "Sponsored by: Google" is fine :). Thanks! | ||||||||||||||||||||||||||||||||||||||||