Fixed Buffer Overflow Issue

[raminfp]

Hi,

Description

less /usr/include/linux/un.h

/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
#ifndef _LINUX_UN_H
#define _LINUX_UN_H

#include <linux/socket.h>

#define UNIX_PATH_MAX   108

struct sockaddr_un {
        __kernel_sa_family_t sun_family; /* AF_UNIX */
        char sun_path[UNIX_PATH_MAX];   /* pathname */
};

#define SIOCUNIXFILE (SIOCPROTOPRIVATE + 0) /* open a socket file with O_PATH */

#endif /* _LINUX_UN_H */

We see char sun_path[UNIX_PATH_MAX]; /* pathname */ of sockaddr_un that UNIX_PATH_MAX=108

Overflow code

strcpy(saun.sun_path, file);

There isn't any check if length file greater of length saun.sun_path

Thanks,
Ramin - Saminray Security Researcher Team (SSRT)

[bk138]

Also, please make sure to squash your commits :-)

[bk138]

Closing in favour of 4791d1e. Nonetheless, you contributions is valued!