Description of problem: In file_name.c: wchar_t *unix_name(doscp_t *dosCp, ... char *s, tname[9], text[4], ans[11]; ... if (*text) { strcpy(ans, tname); strcat(ans, "."); strcat(ans, text); } Oddly enough... /usr/bin/mcopy -D o -D O -o - s:/ldlinux.sys *** buffer overflow detected ***: /usr/bin/mcopy terminated ======= Backtrace: ========= /lib64/libc.so.6(__fortify_fail+0x37)[0x7ffff7b4d717] /lib64/libc.so.6[0x7ffff7b4b5c0] /lib64/libc.so.6[0x7ffff7b4a3ad] /usr/bin/mcopy[0x40a33f] /usr/bin/mcopy[0x41ce5b] /usr/bin/mcopy[0x41570d] /usr/bin/mcopy[0x41592e] /usr/bin/mcopy[0x40e915] Version-Release number of selected component (if applicable): mtools-4.0.0-2.fc11.x86_64
This stops people from using live images off of a USB stick, so sticking on the alpha blocker list.
(In reply to comment #0) > Description of problem: > > In file_name.c: > > wchar_t *unix_name(doscp_t *dosCp, ... > > char *s, tname[9], text[4], ans[11]; > ... > if (*text) { > strcpy(ans, tname); > strcat(ans, "."); > strcat(ans, text); > } > > Oddly enough... > It is a bug but I'm not 100% sure that your crash is due this "off-by-two" error. Could you attach backtrace/core dump, please? Thanks
Don't have it at the moment. However, a s/11/13/ patch makes it not happen.
fixed in mtools-4.0.0-3.fc11