You need to sign in or sign up before continuing.
  • M
    usb-mtp: Limit filename to object information size · 90c1a742
    Michael Hanselmann 提交于
    The filename length in MTP metadata is specified by the guest. By
    trusting it directly it'd theoretically be possible to get the host to
    write memory parts outside the filename buffer into a filename. In
    practice though there are usually NUL bytes stopping the string
    operations.
    
    Also use the opportunity to not assign the filename member twice.
    Signed-off-by: NMichael Hanselmann <public@hansmi.ch>
    Message-id: ab70659d8d5c580bdf150a5f7d5cc60c8e374ffc.1544740018.git.public@hansmi.ch
    
    [ kraxel: codestyle fix: break a long line ]
    Signed-off-by: NGerd Hoffmann <kraxel@redhat.com>
    90c1a742
dev-mtp.c 60.5 KB