[Bug libc/13335] New: chroot_canon(): Fix off-by-one in readlink() buffer

[thomas.jarosch at intra2net dot com]

http://sourceware.org/bugzilla/show_bug.cgi?id=13335

             Bug #: 13335
           Summary: chroot_canon(): Fix off-by-one in readlink() buffer
           Product: glibc
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: libc
        AssignedTo: drepper.fsp@gmail.com
        ReportedBy: thomas.jarosch@intra2net.com
    Classification: Unclassified


Created attachment 6027
  --> http://sourceware.org/bugzilla/attachment.cgi?id=6027
Patch to fix the issue

>From the patch:

chroot_canon(): Fix off-by-one in readlink() buffer

readlink() might return the full size of the buffer,
so we might write the terminating zero past the end of the buffer.

Fix it by reducing the supplied buffer size by 1.

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.