]> git.michaelhowe.org Git - packages/o/openafs.git/commit
cmd: Avoid unsafe use of strncat
authorBenjamin Kaduk <kaduk@mit.edu>
Wed, 22 Jan 2014 05:00:00 +0000 (06:00 +0100)
committerStephan Wiesand <stephan.wiesand@desy.de>
Wed, 12 Feb 2014 14:25:56 +0000 (06:25 -0800)
commit473322a453bbc409d54ab21e1d9637eaf15f085a
tree4e7a3371459206b1ac13d6497844b976ed57ed38
parent9987cb6cc35463eaf87d209e741aacf5c621d894
cmd: Avoid unsafe use of strncat

The NName function was using strncat(a, b, sizeof(a)), which doesn't
work as you would expect if 'a' already contains data, giving a potential
buffer overflow.

This was fixed on master in commit 9a007a9df43645b63a8b642029b4931928f9268b
by using strlcat from libroken, but we do not use libroken on the 1.6
branch. Instead, modify the strncat invocation to use a safer maximum
length to copy.

This is a 1.6-specific change.

Change-Id: Ifa41e603a1c98682550afadd063def4b9706d9e2
Reviewed-on: http://gerrit.openafs.org/10731
Tested-by: BuildBot <buildbot@rampaginggeek.com>
Reviewed-by: D Brashear <shadow@your-file-system.com>
Reviewed-by: Benjamin Kaduk <kaduk@mit.edu>
Reviewed-by: Stephan Wiesand <stephan.wiesand@desy.de>
src/cmd/cmd.c