ahill/flatpak
1
0
Fork 0
mirror of https://github.com/flatpak/flatpak.git synced 2026-01-26 14:13:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

revokefs: Fix off-by-one array size in fuse implementation

Browse Source 
The iovec write_vecs[] array on the stack was just 2 element, but we
sometimes use 3 elements of it. This was causing random crashes due to
corrupting the stack.

Closes: #3110
Approved by: alexlarsson
This commit is contained in:
Alexander Larsson 2019-09-18 08:24:56 +02:00 committed by Atomic Bot
parent 13279af129
commit 84e7b19683
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
revokefs/writer.c
View File

@ -60,7 +60,7 @@ do_request (int writer_socket,
size_t request_size;
size_t response_max_size;
ssize_t written_size, read_size;
struct iovec write_vecs[2] = {};
struct iovec write_vecs[3] = {};
int n_write_vecs = 0;
struct iovec read_vecs[2] = {};
int n_read_vecs = 0;