freebsd-ports/ftp/cftp/files/patch-readrc.c
Wen Heping 6d7f57f1d8 - Fix local buffer overflow (obtained from NetBSD)
- Update WWW
- Pass maintainership to submitter

PR:		ports/142706
Submitted by:	Rob Farmer <rfarmer@predatorlabs.net>
2010-01-18 06:42:34 +00:00

11 lines
374 B
C

--- readrc.c.orig 2010-01-09 23:30:28.000000000 -0800
+++ readrc.c 2010-01-09 23:31:10.000000000 -0800
@@ -46,7 +46,7 @@
char b[8192], *p, *tok, *q, *home;
char *user, *pass, *host, *port, *wdir;
- if ((home=getenv("HOME")) == NULL)
+ if ((home=getenv("HOME")) == NULL || strlen(home) > sizeof(b)-9)
home = "";
sprintf(b, "%s/.cftprc", home);