From: Matthew Daley <mattjd@gmail.com>
Date: Wed, 18 Sep 2013 03:37:56 +0000 (+1200)
Subject: xenstore: check socket path length before copying it
X-Git-Tag: archive/raspbian/4.8.0-1+rpi1~1^2~6278
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=f220279c14f5bcbaeb520c4f2498f25d795213e6;p=xen.git

xenstore: check socket path length before copying it

Coverity-ID: 1055997
Signed-off-by: Matthew Daley <mattjd@gmail.com>
Acked-by: Ian Campbell <ian.campbell@citrix.com>
---

diff --git a/tools/xenstore/xs.c b/tools/xenstore/xs.c
index 86ef6c7f3e..b1e6820cf4 100644
--- a/tools/xenstore/xs.c
+++ b/tools/xenstore/xs.c
@@ -196,6 +196,10 @@ static int get_socket(const char *connect_to)
 		goto error;
 
 	addr.sun_family = AF_UNIX;
+	if(strlen(connect_to) >= sizeof(addr.sun_path)) {
+		errno = EINVAL;
+		goto error;
+	}
 	strcpy(addr.sun_path, connect_to);
 
 	if (connect(sock, (struct sockaddr *)&addr, sizeof(addr)) != 0)