{"push_id":1085002149,"size":2,"distinct_size":2,"ref":"refs/heads/master","head":"b91af2a23dcf0bf7ce2d13ab11bd3c5256d02745","before":"6d897538e279d6b51735ab2aa14b15f213ad3467","commits":[{"sha":"5abde16df3b39ca89396e1ba8e675c205ec76f94","author":{"email":"baa3cdac49150ef6689c8016eab0ce257d183a8f@FreeBSD.org","name":"cem"},"message":"radix_mpath: Don't derefence a NULL pointer in for loop iteration\n\nIt seems rn_dupedkey may be NULL, because of the NULL check inside the loop.\n(Also, the rt gets assigned from rn_dupedkey and NULL checked at top of loop.)\nHowever, the for-loop update condition happens before the top-of-loop check and\ndereferences 'rt' unconditionally.\n\nInstead, NULL-check before dereferencing.\n\nIf rn_dupedkey cannot in fact be NULL, or something else protects this, feel\nfree to revert this and add an ASSERT of some kind instead.\n\nThis was introduced in r191080 (2009) and moved around slightly in r293657.\n\nReported by:\tCoverity\nCID:\t\t1348482\nSponsored by:\tEMC / Isilon Storage Division","distinct":true,"url":"https://api.github.com/repos/bsd-hacker/freebsd/commits/5abde16df3b39ca89396e1ba8e675c205ec76f94"},{"sha":"b91af2a23dcf0bf7ce2d13ab11bd3c5256d02745","author":{"email":"513c04e7aebf88939f3d070f28b1c5fbbba443de@FreeBSD.org","name":"kp"},"message":"msdosfs: Prevent buffer overflow when expanding win95 names\n\nIn win2unixfn() we expand Windows 95 style long names. In some cases that\nrequires moving the data in the nbp->nb_buf buffer backwards to make room. That\ncode failed to check for overflows, leading to a stack overflow in win2unixfn().\n\nWe now check for this event, and mark the entire conversion as failed in that\ncase. This means we present the 8 character, dos style, name instead.\n\nPR: 204643\nDifferential Revision:\thttps://reviews.freebsd.org/D6015","distinct":true,"url":"https://api.github.com/repos/bsd-hacker/freebsd/commits/b91af2a23dcf0bf7ce2d13ab11bd3c5256d02745"}]}