From nobody Sun May 19 08:26:10 2024 Delivered-To: importer@patchew.org Authentication-Results: mx.zohomail.com; dkim=fail; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; dmarc=fail(p=none dis=none) header.from=redhat.com ARC-Seal: i=1; a=rsa-sha256; t=1591640942; cv=none; d=zohomail.com; s=zohoarc; b=iiNUu1pqYExliVrTmNMJxeYNaV2es8G7PZ4sRSWOGjHZWovvW8CgR7synABZq0O5cLN69XSvTMnRs3SR8cJXbmD3l2KRMyOZl+xS71I0Yhaibvf2O2C3aQf0ucv463CvarVdYMlH6HoCatcYw023vTyztmS9tDh+EYtzGnnv0Sc= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1591640942; h=Content-Type:Content-Transfer-Encoding:Cc:Date:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:To; bh=Fzn1SU0GpamPbTVOTDT5aPsdcefjplcB//2tUYEKsYo=; b=ivBZuEPRyPOdMUz/6qMqUxCSEAs95TWPNpGkYhMYsuhEf3Jhzf7wSghs9/+FcSezel+qr/l02O/9uXR8OQp/qDyTHChhkKUS4tMu/eBxblG9c9dOwvyJdFW1psH+2M93Gclm1TixLB9dN4bLnGGg+8e0oMBBir5FwqLW/Kq39qc= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=fail; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; dmarc=fail header.from= (p=none dis=none) header.from= Return-Path: Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mx.zohomail.com with SMTPS id 1591640942940671.3386570423232; Mon, 8 Jun 2020 11:29:02 -0700 (PDT) Received: from localhost ([::1]:40300 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jiMW5-0004DF-M4 for importer@patchew.org; Mon, 08 Jun 2020 14:29:01 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:56706) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jiMU6-0002dv-EP for qemu-devel@nongnu.org; Mon, 08 Jun 2020 14:26:58 -0400 Received: from us-smtp-1.mimecast.com ([207.211.31.81]:37929 helo=us-smtp-delivery-1.mimecast.com) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1jiMU4-0008K1-Ud for qemu-devel@nongnu.org; Mon, 08 Jun 2020 14:26:58 -0400 Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-309-40QFfzhFP1-NCJz5xcRXpg-1; Mon, 08 Jun 2020 14:26:50 -0400 Received: from smtp.corp.redhat.com (int-mx05.intmail.prod.int.phx2.redhat.com [10.5.11.15]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id 051A48014D4; Mon, 8 Jun 2020 18:26:49 +0000 (UTC) Received: from blue.redhat.com (ovpn-113-22.phx2.redhat.com [10.3.113.22]) by smtp.corp.redhat.com (Postfix) with ESMTP id 9FD4E7BA14; Mon, 8 Jun 2020 18:26:45 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1591640813; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=Fzn1SU0GpamPbTVOTDT5aPsdcefjplcB//2tUYEKsYo=; b=WdpoobrPRFPoQhTQM9dU2mbWFIZaAxvQlBA6loaphMT29lKFmTeKrQ2tt2f6Wq+tsgFMow fx6vDtkL+Jztwv7gms1X/RY0Qn5VITuGIMPG2Ivjq+FoiuTsqtcAvEawubdaJUqg72Yi/k w2xFECq/2iRqAMVWr2sDmO+OyG7dD0o= X-MC-Unique: 40QFfzhFP1-NCJz5xcRXpg-1 From: Eric Blake To: qemu-devel@nongnu.org Subject: [PATCH 1/2] nbd/server: Avoid long error message assertions CVE-2020-10761 Date: Mon, 8 Jun 2020 13:26:37 -0500 Message-Id: <20200608182638.3256473-2-eblake@redhat.com> In-Reply-To: <20200608182638.3256473-1-eblake@redhat.com> References: <20200608182638.3256473-1-eblake@redhat.com> MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.79 on 10.5.11.15 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Transfer-Encoding: quoted-printable Received-SPF: pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) client-ip=209.51.188.17; envelope-from=qemu-devel-bounces+importer=patchew.org@nongnu.org; helo=lists.gnu.org; Received-SPF: pass client-ip=207.211.31.81; envelope-from=eblake@redhat.com; helo=us-smtp-delivery-1.mimecast.com X-detected-operating-system: by eggs.gnu.org: First seen = 2020/06/08 05:40:44 X-ACL-Warn: Detected OS = Linux 2.2.x-3.x [generic] [fuzzy] X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_HIGH=0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Kevin Wolf , vsementsov@virtuozzo.com, qemu-block@nongnu.org, qemu-stable@nongnu.org, ppandit@redhat.com, Max Reitz , xuwei@redhat.com Errors-To: qemu-devel-bounces+importer=patchew.org@nongnu.org Sender: "Qemu-devel" X-ZohoMail-DKIM: fail (Header signature does not verify) Content-Type: text/plain; charset="utf-8" Ever since commit 36683283 (v2.8), the server code asserts that error strings sent to the client are well-formed per the protocol by not exceeding the maximum string length of 4096. At the time the server first started sending error messages, the assertion could not be triggered, because messages were completely under our control. However, over the years, we have added latent scenarios where a client could trigger the server to attempt an error message that would include the client's information if it passed other checks first: - requesting NBD_OPT_INFO/GO on an export name that is not present (commit 0cfae925 in v2.12 echoes the name) - requesting NBD_OPT_LIST/SET_META_CONTEXT on an export name that is not present (commit e7b1948d in v2.12 echoes the name) At the time, those were still safe because we flagged names larger than 256 bytes with a different message; but that changed in commit 93676c88 (v4.2) when we raised the name limit to 4096 to match the NBD string limit. (That commit also failed to change the magic number 4096 in nbd_negotiate_send_rep_err to the just-introduced named constant.) So with that commit, long client names appended to server text can now trigger the assertion, and thus be used as a denial of service attack against a server. As a mitigating factor, if the server requires TLS, the client cannot trigger the problematic paths unless it first supplies TLS credentials, and such trusted clients are less likely to try to intentionally crash the server. Reported-by: Xueqiang Wei CC: qemu-stable@nongnu.org Fixes: https://bugzilla.redhat.com/1843684 CVE-2020-10761 Fixes: 93676c88d7 Signed-off-by: Eric Blake --- nbd/server.c | 28 +++++++++++++++++++++++++--- tests/qemu-iotests/143 | 4 ++++ tests/qemu-iotests/143.out | 2 ++ 3 files changed, 31 insertions(+), 3 deletions(-) diff --git a/nbd/server.c b/nbd/server.c index 02b1ed080145..ec130303586d 100644 --- a/nbd/server.c +++ b/nbd/server.c @@ -217,7 +217,7 @@ nbd_negotiate_send_rep_verr(NBDClient *client, uint32_t= type, msg =3D g_strdup_vprintf(fmt, va); len =3D strlen(msg); - assert(len < 4096); + assert(len < NBD_MAX_STRING_SIZE); trace_nbd_negotiate_send_rep_err(msg); ret =3D nbd_negotiate_send_rep_len(client, type, len, errp); if (ret < 0) { @@ -231,6 +231,27 @@ nbd_negotiate_send_rep_verr(NBDClient *client, uint32_= t type, return 0; } +/* + * Truncate a potentially-long user-supplied string into something + * more suitable for an error reply. + */ +static const char * +nbd_truncate_name(const char *name) +{ +#define SANE_LENGTH 80 + static char buf[SANE_LENGTH + 3 + 1]; /* Trailing '...', NUL */ + + if (strlen(name) < SANE_LENGTH) { + return name; + } + memcpy(buf, name, SANE_LENGTH); + buf[SANE_LENGTH] =3D '.'; + buf[SANE_LENGTH + 1] =3D '.'; + buf[SANE_LENGTH + 2] =3D '.'; + buf[SANE_LENGTH + 3] =3D '\0'; + return buf; +} + /* Send an error reply. * Return -errno on error, 0 on success. */ static int GCC_FMT_ATTR(4, 5) @@ -597,7 +618,7 @@ static int nbd_negotiate_handle_info(NBDClient *client,= Error **errp) if (!exp) { return nbd_negotiate_send_rep_err(client, NBD_REP_ERR_UNKNOWN, errp, "export '%s' not present", - name); + nbd_truncate_name(name)); } /* Don't bother sending NBD_INFO_NAME unless client requested it */ @@ -996,7 +1017,8 @@ static int nbd_negotiate_meta_queries(NBDClient *clien= t, meta->exp =3D nbd_export_find(export_name); if (meta->exp =3D=3D NULL) { return nbd_opt_drop(client, NBD_REP_ERR_UNKNOWN, errp, - "export '%s' not present", export_name); + "export '%s' not present", + nbd_truncate_name(export_name)); } ret =3D nbd_opt_read(client, &nb_queries, sizeof(nb_queries), errp); diff --git a/tests/qemu-iotests/143 b/tests/qemu-iotests/143 index f649b3619501..b0b1cff86cb6 100755 --- a/tests/qemu-iotests/143 +++ b/tests/qemu-iotests/143 @@ -58,6 +58,10 @@ _send_qemu_cmd $QEMU_HANDLE \ $QEMU_IO_PROG -f raw -c quit \ "nbd+unix:///no_such_export?socket=3D$SOCK_DIR/nbd" 2>&1 \ | _filter_qemu_io | _filter_nbd +# Likewise, with longest possible name permitted in NBD protocol +$QEMU_IO_PROG -f raw -c quit \ + "nbd+unix:///$(printf %4096d 1 | tr ' ' a)?socket=3D$SOCK_DIR/nbd" 2>&= 1 \ + | _filter_qemu_io | _filter_nbd | sed 's/aa.*aa/aa...aa/' _send_qemu_cmd $QEMU_HANDLE \ "{ 'execute': 'quit' }" \ diff --git a/tests/qemu-iotests/143.out b/tests/qemu-iotests/143.out index 1f4001c60131..be1f3a625458 100644 --- a/tests/qemu-iotests/143.out +++ b/tests/qemu-iotests/143.out @@ -5,6 +5,8 @@ QA output created by 143 {"return": {}} qemu-io: can't open device nbd+unix:///no_such_export?socket=3DSOCK_DIR/nb= d: Requested export not available server reported: export 'no_such_export' not present +qemu-io: can't open device nbd+unix:///aa...aa1?socket=3DSOCK_DIR/nbd: Req= uested export not available +server reported: export 'aa...aa...' not present { 'execute': 'quit' } {"return": {}} {"timestamp": {"seconds": TIMESTAMP, "microseconds": TIMESTAMP}, "event"= : "SHUTDOWN", "data": {"guest": false, "reason": "host-qmp-quit"}} --=20 2.27.0 From nobody Sun May 19 08:26:10 2024 Delivered-To: importer@patchew.org Authentication-Results: mx.zohomail.com; dkim=fail; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; dmarc=fail(p=none dis=none) header.from=redhat.com ARC-Seal: i=1; a=rsa-sha256; t=1591640972; cv=none; d=zohomail.com; s=zohoarc; b=Ynn4HR22HSCjXHYDe4dCUnB8DKVYw55MWk7oY7gM7Mo7tULgA/hRZRJPzHXANTzhbo1QdOG7Nig8RNKRyApgD/6nXZ8b5R70oULv/nuTpHqu1UZ0pgsthyiynIouqIlFBmlZmpq+YjuA+8Wt6ce7yGTT1nCNHLI2HcpwvxIiJWk= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1591640972; h=Content-Type:Content-Transfer-Encoding:Cc:Date:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:To; bh=YTBrbV00VjsBWhjyByoFXNymoQ6bqPJEnFc75E6AU+M=; b=LbiI9bBkRUQtocES3IzHrXJ0JrufgJsEGkdY2zQxDGSEf/2yMA53gM6ptOl/TNYO3ppl4lIq5eJVM5OOmsbi+5Bbi0TNkCAKYYUK3VQpA0p6aW6STYPbTET2Dxqmw8UIOAdrf/4FiK+cWqYPD2araUFrqznM5gopSPVBtVtSsr4= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=fail; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; dmarc=fail header.from= (p=none dis=none) header.from= Return-Path: Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mx.zohomail.com with SMTPS id 1591640972316365.88189095921507; Mon, 8 Jun 2020 11:29:32 -0700 (PDT) Received: from localhost ([::1]:41340 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jiMWY-0004d9-Vy for importer@patchew.org; Mon, 08 Jun 2020 14:29:31 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:56702) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jiMU5-0002cx-Q1 for qemu-devel@nongnu.org; Mon, 08 Jun 2020 14:26:57 -0400 Received: from us-smtp-delivery-1.mimecast.com ([205.139.110.120]:36969 helo=us-smtp-1.mimecast.com) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1jiMU4-0008JD-TV for qemu-devel@nongnu.org; Mon, 08 Jun 2020 14:26:57 -0400 Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-346-IalfSdoiMkiG_GlyzvrwmQ-1; Mon, 08 Jun 2020 14:26:51 -0400 Received: from smtp.corp.redhat.com (int-mx05.intmail.prod.int.phx2.redhat.com [10.5.11.15]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id D2208461; Mon, 8 Jun 2020 18:26:49 +0000 (UTC) Received: from blue.redhat.com (ovpn-113-22.phx2.redhat.com [10.3.113.22]) by smtp.corp.redhat.com (Postfix) with ESMTP id 3459C768BB; Mon, 8 Jun 2020 18:26:49 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1591640812; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=YTBrbV00VjsBWhjyByoFXNymoQ6bqPJEnFc75E6AU+M=; b=U5GYlXPzQYGRJ9o/0WyERJ56mfM56F+FkXlR6MNxI+Vza8Q+B6WPoYtDzyB46CD6ZaJBhF ELXiwVBQ5IOm8fqOganayZSTj6kI+syFJFhjyssWxp1z5AQMy9A0pMEJQezNauJGiEaCey 3P6F4Fcu5Nv8N9X1gkArvoQT4maoz5k= X-MC-Unique: IalfSdoiMkiG_GlyzvrwmQ-1 From: Eric Blake To: qemu-devel@nongnu.org Subject: [PATCH 2/2] block: Call attention to truncation of long NBD exports Date: Mon, 8 Jun 2020 13:26:38 -0500 Message-Id: <20200608182638.3256473-3-eblake@redhat.com> In-Reply-To: <20200608182638.3256473-1-eblake@redhat.com> References: <20200608182638.3256473-1-eblake@redhat.com> MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.79 on 10.5.11.15 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Transfer-Encoding: quoted-printable Received-SPF: pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) client-ip=209.51.188.17; envelope-from=qemu-devel-bounces+importer=patchew.org@nongnu.org; helo=lists.gnu.org; Received-SPF: pass client-ip=205.139.110.120; envelope-from=eblake@redhat.com; helo=us-smtp-1.mimecast.com X-detected-operating-system: by eggs.gnu.org: First seen = 2020/06/08 01:05:50 X-ACL-Warn: Detected OS = Linux 2.2.x-3.x [generic] [fuzzy] X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_HIGH=0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Kevin Wolf , vsementsov@virtuozzo.com, qemu-block@nongnu.org, qemu-stable@nongnu.org, ppandit@redhat.com, Max Reitz , xuwei@redhat.com Errors-To: qemu-devel-bounces+importer=patchew.org@nongnu.org Sender: "Qemu-devel" X-ZohoMail-DKIM: fail (Header signature does not verify) Content-Type: text/plain; charset="utf-8" Commit 93676c88 relaxed our NBD client code to request export names up to the NBD protocol maximum of 4096 bytes without NUL terminator, even though the block layer can't store anything longer than 4096 bytes including NUL terminator for display to the user. Since this means there are some export names where we have to truncate things, we can at least try to make the truncation a bit more obvious for the user. Note that in spite of the truncated display name, we can still communicate with an NBD server using such a long export name; this was deemed nicer than refusing to even connect to such a server (since the server may not be under our control, and since determining our actual length limits gets tricky when nbd://host:port/export and nbd+unix:///export?socket=3D/path are themselves variable-length expansions beyond the export name but count towards the block layer name length). Reported-by: Xueqiang Wei Fixes: https://bugzilla.redhat.com/1843684 Signed-off-by: Eric Blake Reviewed-by: Vladimir Sementsov-Ogievskiy --- block.c | 7 +++++-- block/nbd.c | 21 +++++++++++++-------- 2 files changed, 18 insertions(+), 10 deletions(-) diff --git a/block.c b/block.c index 8416376c9b71..6dbcb7e083ea 100644 --- a/block.c +++ b/block.c @@ -6809,8 +6809,11 @@ void bdrv_refresh_filename(BlockDriverState *bs) pstrcpy(bs->filename, sizeof(bs->filename), bs->exact_filename); } else { QString *json =3D qobject_to_json(QOBJECT(bs->full_open_options)); - snprintf(bs->filename, sizeof(bs->filename), "json:%s", - qstring_get_str(json)); + if (snprintf(bs->filename, sizeof(bs->filename), "json:%s", + qstring_get_str(json)) >=3D sizeof(bs->filename)) { + /* Give user a hint if we truncated things. */ + strcpy(bs->filename + sizeof(bs->filename) - 4, "..."); + } qobject_unref(json); } } diff --git a/block/nbd.c b/block/nbd.c index 4ac23c8f6299..eed160c5cda1 100644 --- a/block/nbd.c +++ b/block/nbd.c @@ -1984,6 +1984,7 @@ static void nbd_refresh_filename(BlockDriverState *bs) { BDRVNBDState *s =3D bs->opaque; const char *host =3D NULL, *port =3D NULL, *path =3D NULL; + size_t len =3D 0; if (s->saddr->type =3D=3D SOCKET_ADDRESS_TYPE_INET) { const InetSocketAddress *inet =3D &s->saddr->u.inet; @@ -1996,17 +1997,21 @@ static void nbd_refresh_filename(BlockDriverState *= bs) } /* else can't represent as pseudo-filename */ if (path && s->export) { - snprintf(bs->exact_filename, sizeof(bs->exact_filename), - "nbd+unix:///%s?socket=3D%s", s->export, path); + len =3D snprintf(bs->exact_filename, sizeof(bs->exact_filename), + "nbd+unix:///%s?socket=3D%s", s->export, path); } else if (path && !s->export) { - snprintf(bs->exact_filename, sizeof(bs->exact_filename), - "nbd+unix://?socket=3D%s", path); + len =3D snprintf(bs->exact_filename, sizeof(bs->exact_filename), + "nbd+unix://?socket=3D%s", path); } else if (host && s->export) { - snprintf(bs->exact_filename, sizeof(bs->exact_filename), - "nbd://%s:%s/%s", host, port, s->export); + len =3D snprintf(bs->exact_filename, sizeof(bs->exact_filename), + "nbd://%s:%s/%s", host, port, s->export); } else if (host && !s->export) { - snprintf(bs->exact_filename, sizeof(bs->exact_filename), - "nbd://%s:%s", host, port); + len =3D snprintf(bs->exact_filename, sizeof(bs->exact_filename), + "nbd://%s:%s", host, port); + } + if (len > sizeof(bs->exact_filename)) { + /* Name is too long to represent exactly, so leave it empty. */ + bs->exact_filename[0] =3D '\0'; } } --=20 2.27.0