[PATCH 6/5] make_absolute_path(): check bounds when seeing an overlong symlink
From: Junio C Hamano <hidden>
Date: 2016-06-15 22:45:47
Signed-off-by: Junio C Hamano <redacted> --- abspath.c | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-)
diff --git i/abspath.c w/abspath.c
index 8194ce1..649f34f 100644
--- i/abspath.c
+++ w/abspath.c@@ -64,6 +64,8 @@ const char *make_absolute_path(const char *path) len = readlink(buf, next_buf, PATH_MAX); if (len < 0) die ("Invalid symlink: %s", buf); + if (PATH_MAX <= len) + die("symbolic link too long: %s", buf); next_buf[len] = '\0'; buf = next_buf; buf_index = 1 - buf_index;