based on report from lha@e.kth.se

note that this works because PIGGYSIZE is always less than AFS_LRALLOCSIZ

(cherry picked from commit 6260cbecd0795c4795341bdcf98671de6b9a43fb)

diff --git a/src/afs/afs_pioctl.c b/src/afs/afs_pioctl.c
index 1732443e8bdcb2947bb26b08f6463be9dd18b716..3c0a96796fbfcc2c2955c8c4675e854c3962a144 100644 (file)
--- a/src/afs/afs_pioctl.c
+++ b/src/afs/afs_pioctl.c
@@ -1072,6 +1072,7 @@ afs_HandlePioctl(avc, acom, ablob, afollow, acred)
     inData = osi_AllocLargeSpace(AFS_LRALLOCSIZ);
     if (inSize > 0) {
       AFS_COPYIN(ablob->in, inData, inSize, code);
+      inData[inSize]='\0';
     }
     else code = 0;
     if (code) {
@@ -1089,8 +1090,10 @@ afs_HandlePioctl(avc, acom, ablob, afollow, acred)
     if (code == 0 && ablob->out_size > 0) {
       if (outSize > ablob->out_size) outSize = ablob->out_size;
       if (outSize >= PIGGYSIZE) code = E2BIG;
-      else if  (outSize) 
+      else if  (outSize) {
        AFS_COPYOUT(outData, ablob->out, outSize, code);
+       outData[outSize]='\0';
+      }
     }
     osi_FreeLargeSpace(outData);
     afs_PutFakeStat(&fakestate);