Blame afpfs-ng-0.8.1-overflows.patch
|
 |
8b007e4 |
Fix possible buffer overflows (given we're copying to storage of AFP_MAX_PATH,
|
|
|
8b007e4 |
while AFP_MAX_PATH is much smaller than PATH_MAX)
|
|
|
8b007e4 |
|
|
|
8b007e4 |
Lubomir Rintel <lkundrak@v3.sk>
|
|
|
8b007e4 |
|
|
|
8b007e4 |
--- afpfs-ng-0.8.1/cmdline/cmdline_afp.c.overflows 2008-10-06 19:21:32.000000000 +0200
|
|
|
8b007e4 |
+++ afpfs-ng-0.8.1/cmdline/cmdline_afp.c 2008-10-06 19:13:50.000000000 +0200
|
|
|
8b007e4 |
@@ -129,9 +129,9 @@
|
|
|
8b007e4 |
{
|
|
|
8b007e4 |
if (filename[0]!='/') {
|
|
|
8b007e4 |
if (strlen(curdir)==1)
|
|
|
8b007e4 |
- snprintf(server_fullname,PATH_MAX,"/%s",filename);
|
|
|
8b007e4 |
+ snprintf(server_fullname,AFP_MAX_PATH,"/%s",filename);
|
|
|
8b007e4 |
else
|
|
|
8b007e4 |
- snprintf(server_fullname,PATH_MAX,"%s/%s",curdir,filename);
|
|
|
8b007e4 |
+ snprintf(server_fullname,AFP_MAX_PATH,"%s/%s",curdir,filename);
|
|
|
8b007e4 |
} else {
|
|
|
8b007e4 |
snprintf(server_fullname,PATH_MAX,"%s",filename);
|
|
|
8b007e4 |
}
|
|
|
8b007e4 |
@@ -1217,7 +1217,7 @@
|
|
|
8b007e4 |
{
|
|
|
8b007e4 |
struct passwd * passwd;
|
|
|
8b007e4 |
|
|
|
8b007e4 |
- snprintf(curdir,PATH_MAX,"%s",DEFAULT_DIRECTORY);
|
|
|
8b007e4 |
+ snprintf(curdir,AFP_MAX_PATH,"%s",DEFAULT_DIRECTORY);
|
|
|
8b007e4 |
if (init_uams()<0) return -1;
|
|
|
8b007e4 |
|
|
|
8b007e4 |
afp_default_url(&url;;
|