mirror/flatpak
1
0
Fork 0
mirror of https://github.com/flatpak/flatpak.git synced 2026-04-03 23:04:49 -04:00
Code Issues Packages Projects Releases Wiki Activity

revokefs: Fix off-by-one array size in fuse implementation

Browse Source 
The iovec write_vecs[] array on the stack was just 2 element, but we
sometimes use 3 elements of it. This was causing random crashes due to
corrupting the stack.

Closes: #3110
Approved by: alexlarsson

(cherry picked from commit 84e7b19683)
This commit is contained in:
Alexander Larsson
2019-09-18 08:24:56 +02:00
committed by Alexander Larsson
parent 866ba643d2
commit 3a005ebbba
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
revokefs/writer.c
View File

@@ -60,7 +60,7 @@ do_request (int writer_socket,
size_t request_size;
size_t response_max_size;
ssize_t written_size, read_size;
struct iovec write_vecs[2] = {};
struct iovec write_vecs[3] = {};
int n_write_vecs = 0;
struct iovec read_vecs[2] = {};
int n_read_vecs = 0;