From 86b403dadb90c30deb51b3530e8ebbb791531615 Mon Sep 17 00:00:00 2001 From: Michael Rash Date: Sat, 1 Sep 2012 23:37:03 -0400 Subject: [PATCH] fixed potential buffer overflow discovered by Fernando Arnaboldi of IOActive --- server/access.c | 12 ++++++++++++ 1 files changed, 12 insertions(+), 0 deletions(-) diff --git a/server/access.c b/server/access.c index 280e702..5778c01 100644 --- a/server/access.c +++ b/server/access.c @@ -501,6 +501,12 @@ expand_acc_string_list(acc_string_list_t **stlist, char *stlist_str) while(isspace(*start)) start++; + if(((ndx-start)+1) >= 1024) + { + fprintf(stderr, "Fatal str->list too long"); + exit(EXIT_FAILURE); + } + strlcpy(buf, start, (ndx-start)+1); add_string_list_ent(stlist, buf); start = ndx+1; @@ -512,6 +518,12 @@ expand_acc_string_list(acc_string_list_t **stlist, char *stlist_str) while(isspace(*start)) start++; + if(((ndx-start)+1) >= 1024) + { + fprintf(stderr, "Fatal str->list too long"); + exit(EXIT_FAILURE); + } + strlcpy(buf, start, (ndx-start)+1); add_string_list_ent(stlist, buf); -- 1.7.5.4