From nobody Wed May 27 09:03:33 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4gQNvT5Txfz6fhVF for ; Wed, 27 May 2026 09:03:33 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4gQNvT0nJ4z3Wgh for ; Wed, 27 May 2026 09:03:33 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1779872613; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=m325wbz0BhIvr2Z//dSxXUL4xpT9yjb2HXQCOOdIfdg=; b=AYwOkzuiYKbt30TD0Bwficie8ifbDzYDSvp78dhHO9UDPYOA7Z+LJDIIWyKyQUJiHu/rKs cI91xaFhiEjHiX63to7TP/dUbgmrYRAxTu577hxXnKGV+LxOFf1YS02ssryMBoQM0wCVzc dvirCLppvtiPCJjcjqiwKEaVo0xW0RkQfND3RIVNU/NeAiOhj1coPXMjEk3sSXg++MLhV7 qeDiNtVsALMQ+BOQJpjY+T0ohh6QINgEAmaQODlejOrxvkPZvNrR+ur8bWyOaaIguVoGgo COIiNYsfuCGpUD+Orjc2OcWIZ7c6A4a6FBskqsUpuzxdouuZxW7keuXVlkCv8Q== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1779872613; a=rsa-sha256; cv=none; b=wUEoboUxNMynxUTTEg6X6xF4Gmila5vti589KdHltYsgExJ+wUxhXkP6Y8MRuR1V5uS2f6 +tBsf6RBFo+dwk3t/bRSEqyooHESAD15T750I6kLb3yreqxOjaATBnQEnJsoTGb+VqR7gY Osn4V8puRDc1pTJKR598NTOkJsFg7uIUCBoHQaZORwOfvKfVKjHFVMBZUzykB9FCt76imc Fiim1/VW7WuQQiZ+9YyYBA3+iAUgL0biLiy7C2h3+8UJSg9uVwtmAmOleyma2H1MEr7eSU 3Ubqu1t2FcCXnJtEMPnyuOVT+cEPaTD+E+EB87WWhf7F8I5kgtG1PHcDiUWlDw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1779872613; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=m325wbz0BhIvr2Z//dSxXUL4xpT9yjb2HXQCOOdIfdg=; b=gPIX3iho/pSnJbaC3OYfaR4CTILeXP2CldOZNoPsJbg3xhug2iBwmGhUhJrlGiFltQGnoI CnXqk3CeP4OcCT5DEs/o+IeDiozpPHFyM1ZSTdYFee5kkOS4GxgAqeJxStKnUmGf9VQSBT VThbfgYkfeScKQFCGCOqGObE49E/Vn4Eq6OXIJ2rpC/kDc06AjlV6rrAyhpJAKdTaDgtO/ XicQ+VJ4TjyWuGIbTKRWs2R07JgLRW5355v0o0/sW081qfAVmuR609PBEfnHoGH3qyIXn0 z7CVte+2N3hLQ6FRifVqVp7i/KeXzWjr0PtqLBzfDShUKIBuTPVPf+e8nzV6Cg== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4gQNvT0NLfzslv for ; Wed, 27 May 2026 09:03:33 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 261ea by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Wed, 27 May 2026 09:03:33 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org From: Dag-Erling=?utf-8?Q? Sm=C3=B8rg?=rav Subject: git: 99cbf1f6d7d2 - stable/15 - tftp: Add test case with over-long URL List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: des X-Git-Repository: src X-Git-Refname: refs/heads/stable/15 X-Git-Reftype: branch X-Git-Commit: 99cbf1f6d7d263ec276e7c4955f3c64f1a3bf24b Auto-Submitted: auto-generated Date: Wed, 27 May 2026 09:03:33 +0000 Message-Id: <6a16b365.261ea.273d6b38@gitrepo.freebsd.org> The branch stable/15 has been updated by des: URL: https://cgit.FreeBSD.org/src/commit/?id=99cbf1f6d7d263ec276e7c4955f3c64f1a3bf24b commit 99cbf1f6d7d263ec276e7c4955f3c64f1a3bf24b Author: Dag-Erling Smørgrav AuthorDate: 2026-05-22 17:57:27 +0000 Commit: Dag-Erling Smørgrav CommitDate: 2026-05-27 09:03:21 +0000 tftp: Add test case with over-long URL This adds a test case that passes a very long URL on the command line, which would previously have resulted in a benign buffer overflow in urihandling(), detectable only by compiling tftp with ASAN enabled. MFC after: 1 week Reviewed by: markj Differential Revision: https://reviews.freebsd.org/D57074 (cherry picked from commit b94689d036c5f5bdc04d080ff7dd5d0e9df9b8d4) --- usr.bin/tftp/tests/tftp_test.sh | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/usr.bin/tftp/tests/tftp_test.sh b/usr.bin/tftp/tests/tftp_test.sh index a4c9f3b898e7..12c008b2c78c 100644 --- a/usr.bin/tftp/tests/tftp_test.sh +++ b/usr.bin/tftp/tests/tftp_test.sh @@ -442,6 +442,29 @@ tftp_url_ipv6_cleanup() { stop_tftpd } +atf_test_case tftp_url_long cleanup +tftp_url_long_head() { + atf_set "descr" "Very long URL" + atf_set "require.user" "root" +} +tftp_url_long_body() { + start_tftpd + mkdir "${tftp_dir}/subdirectory" + local remote_file="${tftp_dir}/hello.txt" + echo "Hello, $$!" >"${remote_file}" + local local_file="${remote_file##*/}" + local d="subdirectory/../" + d="${d}${d}${d}${d}${d}${d}${d}${d}" + d="${d}${d}${d}${d}${d}${d}${d}${d}" + d="${d}${d}${d}${d}${d}${d}${d}${d}" + atf_check -s exit:1 -o match:"Illegal TFTP operation" \ + tftp "tftp://localhost/${d}${remote_file##*/}" + atf_check -s exit:1 test -f "${local_file}" +} +tftp_url_long_cleanup() { + stop_tftpd +} + atf_init_test_cases() { atf_add_test_case tftp_get_big atf_add_test_case tftp_get_host @@ -462,4 +485,5 @@ atf_init_test_cases() { atf_add_test_case tftp_url_host atf_add_test_case tftp_url_ipv4 atf_add_test_case tftp_url_ipv6 + atf_add_test_case tftp_url_long }