[Bug 1062022] Re: exportfs crash with long path

[Dave Gilbert]

I suspect the problem is caused by the top-bit set non-ascii characters in your path rather than the length of the string.
While I think your patch is sufficient, I'd actually fix:
   * The cast of (int) in strtoint and change it to a (unsigned int)
   * and the type of export_hash

Dave

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to nfs-utils in Ubuntu.
https://bugs.launchpad.net/bugs/1062022

Title:
  exportfs crash with long path

Status in “nfs-utils” package in Ubuntu:
  Triaged

Bug description:
  How reproducible:
  always

  Steps to Reproduce:
  # mkdir -p /home/kudinae/Общедоступные
  # echo '/home/kudinae/Общедоступные oek-1(rw,sync,no_wdelay,no_root_squash,no_subtree_check)' > /etc/exports
  # exportfs -a
  Segmentation fault

  I've obtained the sources. So a crush happens on export.c:293. variable pos has negative value. I think problem into strtoint and export_hash functions. strtoint has unsigned type and always returns positive value but export_hash impicity cast it to signed int. So it is possible to get negative value. 
  I wrote patch to fix this.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/1062022/+subscriptions