system/freebsd-src
system/freebsd-src
1
0
Fork 0
mirror of https://github.com/freebsd/freebsd-src synced 2024-07-23 03:06:48 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Fix libfetch out of bounds read.

Browse source 
Approved by:	so
Security:	SA-21:15.libfetch
Security:	CVE-2021-36159
This commit is contained in:
Gordon Tetlow 2021-08-24 10:59:01 -07:00
parent 91a8bed5a4
commit 64ae2f785e
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
lib/libfetch/ftp.c
View file

@ -704,8 +704,11 @@ ftp_transfer(conn_t *conn, const char *oper, const char *file,
goto ouch;
}
l = (e == FTP_PASSIVE_MODE ? 6 : 21);
for (i = 0; *p && i < l; i++, p++)
for (i = 0; *p && i < l; i++, p++) {
addr[i] = strtol(p, &p, 10);
if (*p == '\0' && i < l - 1)
break;
}
if (i < l) {
e = FTP_PROTOCOL_ERROR;
goto ouch;