add sanity check for d_name length in unlink

notzhan · Feb 25, 2012 · dfb0715 · dfb0715
1 parent 97ebbc6
commit dfb0715
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/fs/namei.c b/src/fs/namei.c
@@ -64,7 +64,7 @@ int unlink_entry(struct inode *dip, char *name, int len){
         bp = bread(dip->i_dev, bn);
         dep = (struct dirent *)bp->b_data;
         for(j=0; j<BLK/(sizeof(struct dirent))+1; j++) {
-            if (0==strncmp(name, dep[j].d_name, len)){
+            if (len==strlen(dep[j].d_name) && 0==strncmp(name, dep[j].d_name, len)){
                 ino = dep[j].d_ino;
                 dep[j].d_ino = 0;
                 bwrite(bp);