d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fortune, strfile: Improve validation of command-line arguments.

Browse Source 
- Avoid potential overflow when parsing a percentage.
- Avoid truncation when copying file paths.

PR:		246050
Submitted by:	Akos Somfai <akos.somfai@gmail.com> (original)
MFC after:	1 week
This commit is contained in:
Mark Johnston 2020-08-10 17:01:59 +00:00
parent a08d04f4e4
commit 777c9f5a38
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=364083
2 changed files with 19 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
usr.bin/fortune/fortune/fortune.c
View File

@ -400,11 +400,12 @@ form_file_list(char **files, int file_cnt)
sp = files[i];
else {
percent = 0;
for (sp = files[i]; isdigit((unsigned char)*sp); sp++)
for (sp = files[i]; isdigit((unsigned char)*sp); sp++) {
percent = percent * 10 + *sp - '0';
if (percent > 100) {
fprintf(stderr, "percentages must be <= 100\n");
return (FALSE);
if (percent > 100) {
fprintf(stderr, "percentages must be <= 100\n");
return (FALSE);
}
}
if (*sp == '.') {
fprintf(stderr, "percentages must be integers\n");

18
usr.bin/fortune/strfile/strfile.c
View File

@ -295,16 +295,26 @@ getargs(int argc, char **argv)
if (*argv) {
Infile = *argv;
if (*++argv)
strcpy(Outfile, *argv);
if (*++argv) {
if (strlcpy(Outfile, *argv, sizeof(Outfile)) >=
sizeof(Outfile)) {
fprintf(stderr,
"output_file path is too long\n");
exit(1);
}
}
}
if (!Infile) {
puts("No input file name");
usage();
}
if (*Outfile == '\0') {
strlcpy(Outfile, Infile, sizeof(Outfile));
strlcat(Outfile, ".dat", sizeof(Outfile));
if ((size_t)snprintf(Outfile, sizeof(Outfile), "%s.dat",
Infile) >= sizeof(Outfile)) {
fprintf(stderr,
"generated output_file path is too long\n");
exit(1);
}
}
}