qemu-devel.nongnu.org archive mirror
 help / color / mirror / Atom feed
* [Qemu-devel] [PATCH] Fix off-by-one bug limiting VNC passwords to 7 chars
@ 2008-11-23 11:31 Chris Webb
  2008-11-23 12:31 ` Thiemo Seufer
  0 siblings, 1 reply; 9+ messages in thread
From: Chris Webb @ 2008-11-23 11:31 UTC (permalink / raw)
  To: qemu-devel; +Cc: kvm

Fix off-by-one bug limiting VNC passwords to 7 characters instead of 8

monitor_readline expects buf_size to include the terminating \0, but
do_change_vnc in monitor.c calls it as though it doesn't. The other site
where monitor_readline reads a password (in vl.c) passes the buffer length
correctly.

Signed-off-by: Chris Webb <chris@arachsys.com>
---
 monitor.c |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/monitor.c b/monitor.c
index 22360fc..6ae5729 100644
--- a/monitor.c
+++ b/monitor.c
@@ -433,7 +433,7 @@ static void do_change_vnc(const char *target)
     if (strcmp(target, "passwd") == 0 ||
 	strcmp(target, "password") == 0) {
 	char password[9];
-	monitor_readline("Password: ", 1, password, sizeof(password)-1);
+	monitor_readline("Password: ", 1, password, sizeof(password));
 	password[sizeof(password)-1] = '\0';
 	if (vnc_display_password(NULL, password) < 0)
 	    term_printf("could not set VNC server password\n");

^ permalink raw reply related	[flat|nested] 9+ messages in thread

end of thread, other threads:[~2008-12-10 15:14 UTC | newest]

Thread overview: 9+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2008-11-23 11:31 [Qemu-devel] [PATCH] Fix off-by-one bug limiting VNC passwords to 7 chars Chris Webb
2008-11-23 12:31 ` Thiemo Seufer
2008-11-25 10:09   ` Chris Webb
2008-11-25 10:25     ` [Qemu-devel] [PATCH v2] " Chris Webb
2008-11-25 10:26       ` [Qemu-devel] [PATCH v2] Accept password as an argument to 'change vnc password' Chris Webb
2008-12-08 14:09       ` [Qemu-devel] [RESEND] " Chris Webb
2008-12-10 15:14         ` [Qemu-devel] " Anthony Liguori
2008-12-08 14:09     ` [Qemu-devel] [RESEND] [PATCH v2] Fix off-by-one bug limiting VNC passwords to 7 chars Chris Webb
2008-12-10 15:14       ` [Qemu-devel] " Anthony Liguori

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).