d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Prevent buffer overflow if NLSPATH is too long

Browse Source
This commit is contained in:
Andrey A. Chernov 2000-09-08 11:42:37 +00:00
parent f907abc0b3
commit 86797bf956
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
lib/libc/nls/msgcat.c
View File

@ -144,6 +144,8 @@ catopen( name, type)
++nlspath;
/* fallthrough */
default:
if (pathP - path >= sizeof(path) - 1)
goto too_long;
*(pathP++) = *nlspath;
continue;
}
@ -151,13 +153,17 @@ catopen( name, type)
put_tmpptr:
spcleft = sizeof(path) - (pathP - path) - 1;
if (strlcpy(pathP, tmpptr, spcleft) >= spcleft) {
too_long:
free(plang);
free(base);
NLRETERR(ENAMETOOLONG);
}
pathP += strlen(tmpptr);
} else
} else {
if (pathP - path >= sizeof(path) - 1)
goto too_long;
*(pathP++) = *nlspath;
}
}
*pathP = '\0';
if (stat(path, &sbuf) == 0) {