The branch main has been updated by dchagin:

URL: 
https://cgit.FreeBSD.org/src/commit/?id=d6ccce0aa267db8ee57736e944520e2967896340

commit d6ccce0aa267db8ee57736e944520e2967896340
Author:     Dmitry Chagin <dcha...@freebsd.org>
AuthorDate: 2022-03-31 18:21:41 +0000
Commit:     Dmitry Chagin <dcha...@freebsd.org>
CommitDate: 2022-03-31 18:21:41 +0000

    linux(4): readlink should fail if bufzis <= 0.
    
    MFC after:              2 weeks
---
 sys/compat/linux/linux_file.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/sys/compat/linux/linux_file.c b/sys/compat/linux/linux_file.c
index 6a1402c09456..8926e760fc39 100644
--- a/sys/compat/linux/linux_file.c
+++ b/sys/compat/linux/linux_file.c
@@ -1042,6 +1042,9 @@ linux_readlink(struct thread *td, struct 
linux_readlink_args *args)
        char *name;
        int error;
 
+       if (args->count <= 0)
+               return (EINVAL);
+
        if (!LUSECONVPATH(td)) {
                return (kern_readlinkat(td, AT_FDCWD, args->name, UIO_USERSPACE,
                    args->buf, UIO_USERSPACE, args->count));
@@ -1060,6 +1063,9 @@ linux_readlinkat(struct thread *td, struct 
linux_readlinkat_args *args)
        char *name;
        int error, dfd;
 
+       if (args->bufsiz <= 0)
+               return (EINVAL);
+
        dfd = (args->dfd == LINUX_AT_FDCWD) ? AT_FDCWD : args->dfd;
        if (!LUSECONVPATH(td)) {
                return (kern_readlinkat(td, dfd, args->path, UIO_USERSPACE,

Reply via email to