diff options
author | Andy Chu <andychu@google.com> | 2016-03-19 23:11:30 -0700 |
---|---|---|
committer | Rob Landley <rob@landley.net> | 2016-04-14 21:30:24 -0500 |
commit | 433296f8802ccf82eb32da3bfa002df2a8b5095a (patch) | |
tree | f6d98eeab74343cb31a0d9ff67ef07d447f00944 /toys/other/freeramdisk.c | |
parent | c73947814aab381a0761ecc919e6c5407c3fd617 (diff) | |
download | toybox-433296f8802ccf82eb32da3bfa002df2a8b5095a.tar.gz |
Fix a buffer overflow in diff -r.
We were doing two 32-byte memset()s instead of two 16-byte memset()s.
'dir' referred to the instance (array of 2) and not the struct type.
Add some test coverage for diff, including a case that hit this bug.
The bug was found by running cp.test under AddressSanitizer, since it
happens to use diff.
Diffstat (limited to 'toys/other/freeramdisk.c')
0 files changed, 0 insertions, 0 deletions