openbsd-ports/databases/gnats/patches/patch-gnats_npr-edit_c
brad 9e8ecfb2f4 Fix some security issues with gnats.
Some additional fixes from millert@
sprintf -> snprintf
str{cat,cpy} -> strl{cat,cpy}

http://marc.theaimsgroup.com/?l=bugtraq&m=105638591907836&w=2

ok naddy@
2003-08-25 23:33:56 +00:00

16 lines
519 B
Plaintext

$OpenBSD: patch-gnats_npr-edit_c,v 1.1 2003/08/25 23:35:06 brad Exp $
--- gnats/npr-edit.c.orig Tue Sep 21 17:18:39 1999
+++ gnats/npr-edit.c Wed Jul 2 13:23:13 2003
@@ -92,8 +92,9 @@ int
receive_list (cmd, suff)
char *cmd, *suff;
{
- char *s = (char *) xmalloc (strlen (outname) + 5);
- sprintf (s, "%s%s", outname, suff);
+ size_t len = strlen (outname) + 5;
+ char *s = (char *) xmalloc (len);
+ snprintf (s, len, "%s%s", outname, suff);
outfp = fopen (s, "w");
if (outfp == (FILE *)NULL)
{