jyapayne/musl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix completely bogus loop condition in getmntent_r

Browse source 
somehow this worked on my simple fstab, but horribly broke in general,
leading to use of uninitialized offset array and crashes.
This commit is contained in:
Rich Felker 2011-04-06 12:35:05 -04:00
commit 6b87e941f9
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/linux/mntent.c
View file

@ -26,7 +26,7 @@ struct mntent *getmntent_r(FILE *f, struct mntent *mnt, char *linebuf, int bufle
cnt = sscanf(linebuf, " %n%*s%n %n%*s%n %n%*s%n %n%*s%n %d %d", cnt = sscanf(linebuf, " %n%*s%n %n%*s%n %n%*s%n %n%*s%n %d %d",
n, n+1, n+2, n+3, n+4, n+5, n+6, n+7, n, n+1, n+2, n+3, n+4, n+5, n+6, n+7,
&mnt->mnt_freq, &mnt->mnt_passno); &mnt->mnt_freq, &mnt->mnt_passno);
} while (cnt >= 8 && linebuf[n[0]] != '#'); } while (cnt < 2 || linebuf[n[0]] == '#');
linebuf[n[1]] = 0; linebuf[n[1]] = 0;
linebuf[n[3]] = 0; linebuf[n[3]] = 0;