Re: [PATCH 1/2] libmultipath: make sure sscanf sets a max field width for strings
Martin Wilck <[email protected]> Tue, 07 Jul 2026 15:40:46 +0200
| Newsgroups | dev.linux.lists.dm-devel |
|---|---|
| Message-ID | <[email protected]> |
On Mon, 2026-07-06 at 20:48 -0400, Benjamin Marzinski wrote: > In the iet and datacore prioritizers, multipath was using sscanf to > get > a string for a 255 byte buffer, without limiting the size of the > string. > This could result in a buffer overflow, if there was a bad value in > multipath.conf. > > Signed-off-by: Benjamin Marzinski <[email protected]> Reviewed-by: Martin Wilck <[email protected]>