From: Jeffrey Altman <jaltman@secure-endpoints.com>
Date: Tue, 3 Jul 2007 15:12:45 +0000 (+0000)
Subject: DEVEL15-windows-heap-corruption-20070703
X-Git-Tag: openafs-devel-1_5_21~14
X-Git-Url: https://git.michaelhowe.org/gitweb/?a=commitdiff_plain;h=63d2357afe31546f6fa3f28b8c297df6add5448d;p=packages%2Fo%2Fopenafs.git

DEVEL15-windows-heap-corruption-20070703


fix buffer over write error introduced since 1.5.20


(cherry picked from commit 1027ca87a78f02b62af67adfd85fdd4cd43fa65e)
---

diff --git a/src/WINNT/afsd/smb.c b/src/WINNT/afsd/smb.c
index 504b57b2d..ce4c2a4b7 100644
--- a/src/WINNT/afsd/smb.c
+++ b/src/WINNT/afsd/smb.c
@@ -1813,7 +1813,7 @@ int smb_FindShare(smb_vc_t *vcp, smb_user_t *uidp, char *shareName,
         snprintf(pathstr, sizeof(pathstr)/sizeof(char),
                  "/" CM_PREFIX_VOL "%s", shareName);
         pathstr[sizeof(pathstr)/sizeof(char) - 1] = '\0';
-        len = strlen(pathstr);
+        len = strlen(pathstr) + 1;
 
         *pathNamep = malloc(len);
         if (*pathNamep) {