331d28b
Bugzilla Bug 176714 – *** stack smashing detected ***: /sbin/ifconfig terminated
331d28b
331d28b
--- lib/interface.c-old	2005-12-30 11:08:15.000000000 -0800
331d28b
+++ lib/interface.c	2005-12-30 11:17:02.000000000 -0800
331d28b
@@ -201,10 +201,11 @@
331d28b
     return err;
331d28b
 }
331d28b
 
331d28b
-static char *get_name(char *name, char *p)
331d28b
+static char *get_name(char **namep, char *p)
331d28b
 {
331d28b
     while (isspace(*p))
331d28b
 	p++;
331d28b
+    char *name = *namep = p;
331d28b
     while (*p) {
331d28b
 	if (isspace(*p))
331d28b
 	    break;
331d28b
@@ -305,9 +306,10 @@
331d28b
 {
331d28b
     static int proc_read; 
331d28b
     FILE *fh;
331d28b
-    char buf[512];
331d28b
     struct interface *ife;
331d28b
     int err;
331d28b
+    char *line = NULL;
331d28b
+    size_t linelen = 0;
331d28b
 
331d28b
     if (proc_read) 
331d28b
 	    return 0; 
331d28b
@@ -320,8 +322,11 @@
331d28b
 			_PATH_PROCNET_DEV, strerror(errno)); 
331d28b
 		return if_readconf();
331d28b
 	}	
331d28b
-    fgets(buf, sizeof buf, fh);	/* eat line */
331d28b
-    fgets(buf, sizeof buf, fh);
331d28b
+    if (getline(&line, &linelen, fh) == -1 /* eat line */
331d28b
+	|| getline(&line, &linelen, fh) == -1) {
331d28b
+		err = -1;
331d28b
+		goto out;
331d28b
+    }
331d28b
 
331d28b
 #if 0				/* pretty, but can't cope with missing fields */
331d28b
     fmt = proc_gen_fmt(_PATH_PROCNET_DEV, 1, fh,
331d28b
@@ -346,13 +351,13 @@
331d28b
     if (!fmt)
331d28b
 	return -1;
331d28b
 #else
331d28b
-    procnetdev_vsn = procnetdev_version(buf);
331d28b
+    procnetdev_vsn = procnetdev_version(line);
331d28b
 #endif
331d28b
 
331d28b
     err = 0;
331d28b
-    while (fgets(buf, sizeof buf, fh)) {
331d28b
-	char *s, name[IFNAMSIZ];
331d28b
-	s = get_name(name, buf);    
331d28b
+    while (getline(&line, &linelen, fh) != -1) {
331d28b
+	char *s, *name;
331d28b
+	s = get_name(&name, line);    
331d28b
 	ife = add_interface(name);
331d28b
 	get_dev_fields(s, ife);
331d28b
 	ife->statistics_valid = 1;
331d28b
@@ -368,6 +373,8 @@
331d28b
 #if 0
331d28b
     free(fmt);
331d28b
 #endif
331d28b
+  out:
331d28b
+    free(line);
331d28b
     fclose(fh);
331d28b
     return err;
331d28b
 }
331d28b
@@ -376,8 +383,9 @@
331d28b
 static int if_readlist_rep(char *target, struct interface *ife)
331d28b
 {
331d28b
     FILE *fh;
331d28b
-    char buf[512];
331d28b
     int err;
331d28b
+    char *line = NULL;
331d28b
+    size_t linelen = 0;
331d28b
 
331d28b
     fh = fopen(_PATH_PROCNET_DEV, "r");
331d28b
     if (!fh) {
331d28b
@@ -385,15 +393,18 @@
331d28b
 			_PATH_PROCNET_DEV, strerror(errno)); 
331d28b
 		return if_readconf();
331d28b
 	}	
331d28b
-    fgets(buf, sizeof buf, fh);	/* eat line */
331d28b
-    fgets(buf, sizeof buf, fh);
331d28b
+    if (getline(&line, &linelen, fh) == -1 /* eat line */
331d28b
+	|| getline(&line, &linelen, fh) == -1) {
331d28b
+		err = -1;
331d28b
+		goto out;
331d28b
+    }
331d28b
 
331d28b
-    procnetdev_vsn = procnetdev_version(buf);
331d28b
+    procnetdev_vsn = procnetdev_version(line);
331d28b
 
331d28b
     err = 0;
331d28b
-    while (fgets(buf, sizeof buf, fh)) {
331d28b
-	char *s, name[IFNAMSIZ];
331d28b
-	s = get_name(name, buf);    
331d28b
+    while (getline(&line, &linelen, fh) != -1) {
331d28b
+	char *s, *name;
331d28b
+	s = get_name(&name, line);    
331d28b
 	get_dev_fields(s, ife);
331d28b
 	if (target && !strcmp(target,name))
331d28b
 	{
331d28b
@@ -406,6 +417,8 @@
331d28b
 	err = -1;
331d28b
     }
331d28b
 
331d28b
+  out:
331d28b
+    free(line);
331d28b
     fclose(fh);
331d28b
     return err;
331d28b
 }