1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
|
From: <peter@p12n.org>
Subject: Prevent buffer overflow from the environment.
diff -urNad xsok-1.02/src/loadsave.c xsok-1.02/src/loadsave.c
--- xsok-1.02/src/loadsave.c 1995-11-03 12:38:14.000000000 -0600
+++ xsok-1.02/src/loadsave.c 2005-08-05 08:08:43.000000000 -0500
@@ -42,7 +42,7 @@
const char *s;
char p[100];
if ((s = getenv("LANG"))) {
- sprintf(p, "%s/%s", xsokdir, s);
+ snprintf(p, 100, "%s/%s", xsokdir, s);
if (!access(p, F_OK)) { /* langdir does exist */
langdir = s;
return;
|