Changeset 896 in openpam

Timestamp:

Jan 17, 2017, 2:34:00 PM (4 years ago)

Author:

Dag-Erling Smørgrav

Message:

merge r745: (belatedly) add defensive length check to strlcpy()

Location:

branches/nooath

Files:

• . (modified) (1 prop)
• lib/libpam/openpam_configure.c (modified) (1 diff)

branches/nooath/lib/libpam/openpam_configure.c

@@ -411 +411 @@
                 /* construct filename */
                 len = strlcpy(filename, *path, sizeof filename);
+                if (len >= sizeof filename) {
+                        errno = ENAMETOOLONG;
+                        RETURNN(-1);
+                }
                 if (filename[len - 1] == '/') {
                         len = strlcat(filename, service, sizeof filename);