* [PATCH] udev buffer overrun fix
@ 2004-02-24 19:57 Michael Buesch
0 siblings, 0 replies; only message in thread
From: Michael Buesch @ 2004-02-24 19:57 UTC (permalink / raw)
To: linux-hotplug
Hi,
This patch fixes a possible buffer overrun for
char filename[255] in create_node().
--- udev-add.c.orig 2004-02-24 15:24:13.000000000 +0100
+++ udev-add.c 2004-02-24 20:49:25.000000000 +0100
@@ -146,7 +146,7 @@
int tail;
strncpy(filename, udev_root, sizeof(filename));
- strncat(filename, dev->name, sizeof(filename));
+ strncat(filename, dev->name, sizeof(filename) - strlen(udev_root) - 1);
switch (dev->type) {
case 'b':
--
Regards Michael Buesch [ http://www.tuxsoft.de.vu ]
-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id\x1356&alloc_id438&op=click
_______________________________________________
Linux-hotplug-devel mailing list http://linux-hotplug.sourceforge.net
Linux-hotplug-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/linux-hotplug-devel
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2004-02-24 19:57 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-02-24 19:57 [PATCH] udev buffer overrun fix Michael Buesch
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).