Date: Mon, 28 Nov 2016 13:24:47 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-jail@FreeBSD.org Subject: [Bug 214881] jail with path=/ and sysctl.disablefullpath=1 leads to NULL dereference Message-ID: <bug-214881-9824-9GCNCSIY5H@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-214881-9824@https.bugs.freebsd.org/bugzilla/>
index | next in thread | previous in thread | raw e-mail
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=214881 Konstantin Belousov <kib@FreeBSD.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jamie@FreeBSD.org, | |kib@FreeBSD.org --- Comment #1 from Konstantin Belousov <kib@FreeBSD.org> --- (In reply to aler from comment #0) I suspect that this is just a thinko, the case path == NULL is handled later. OTOH, it is not clear to me that path == NULL should result in the '0' addend to len in the check. If you do consider the right action to be cleanup, then the failing len check already provides an example what to do. Anyway, I am attaching patch with simple additional check for path == NULL. -- You are receiving this mail because: You are the assignee for the bug.home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-214881-9824-9GCNCSIY5H>