ed(1): Prevent possible string overflows

Use strlcpy instead of strncpy to guarantee NULL termination.

Pointed out by:	imp
CID:		1007252
X-MFC with:	r292454
This commit is contained in:
Pedro F. Giffuni 2015-12-18 23:05:36 +00:00
parent bebd99b272
commit 6e8ef9cbb0
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=292455

View File

@ -506,7 +506,7 @@ exec_command(void)
else if (open_sbuf() < 0)
return FATAL;
if (*fnp && *fnp != '!')
strncpy(old_filename, fnp, PATH_MAX);
strlcpy(old_filename, fnp, PATH_MAX);
#ifdef BACKWARDS
if (*fnp == '\0' && *old_filename == '\0') {
errmsg = "no current filename";
@ -534,7 +534,7 @@ exec_command(void)
}
GET_COMMAND_SUFFIX();
if (*fnp)
strncpy(old_filename, fnp, PATH_MAX);
strlcpy(old_filename, fnp, PATH_MAX);
printf("%s\n", strip_escapes(old_filename));
break;
case 'g':
@ -665,7 +665,7 @@ exec_command(void)
GET_COMMAND_SUFFIX();
if (!isglobal) clear_undo_stack();
if (*old_filename == '\0' && *fnp != '!')
strncpy(old_filename, fnp, PATH_MAX);
strlcpy(old_filename, fnp, PATH_MAX);
#ifdef BACKWARDS
if (*fnp == '\0' && *old_filename == '\0') {
errmsg = "no current filename";
@ -799,7 +799,7 @@ exec_command(void)
return ERR;
GET_COMMAND_SUFFIX();
if (*old_filename == '\0' && *fnp != '!')
strncpy(old_filename, fnp, PATH_MAX);
strlcpy(old_filename, fnp, PATH_MAX);
#ifdef BACKWARDS
if (*fnp == '\0' && *old_filename == '\0') {
errmsg = "no current filename";