Sfoglia il codice sorgente

main.c: fix strncat call to prevent buffer overflow

Signed-off-by: Danny Al-Gaaf <danny.al-gaaf@bisect.de>
Danny Al-Gaaf 11 anni fa
parent
commit
91f7daa9ed
1 ha cambiato i file con 1 aggiunte e 1 eliminazioni
  1. 1 1
      src/main.c

+ 1 - 1
src/main.c

@@ -505,7 +505,7 @@ static void set_absolute_path(char *options[], const char *option_name,
         }
         }
 
 
         strncat(path, "/", sizeof(path) - 1);
         strncat(path, "/", sizeof(path) - 1);
-        strncat(path, option_value, sizeof(path) - 1);
+        strncat(path, option_value, sizeof(path) - strlen(path) - 1);
 
 
         /* Absolutize the path, and set the option */
         /* Absolutize the path, and set the option */
         IGNORE_UNUSED_RESULT(abs_path(path, abs, sizeof(abs)));
         IGNORE_UNUSED_RESULT(abs_path(path, abs, sizeof(abs)));