Blame SOURCES/0006-conntrackd-use-strncpy-to-unix-path.patch
|
 |
4a3166 |
From 16b593316dcf2fac1d583397f94b727791af8a1c Mon Sep 17 00:00:00 2001
|
|
|
4a3166 |
From: Pablo Neira Ayuso <pablo@netfilter.org>
|
|
|
4a3166 |
Date: Wed, 20 Mar 2019 08:19:18 +0100
|
|
|
4a3166 |
Subject: [PATCH] conntrackd: use strncpy() to unix path
|
|
|
4a3166 |
|
|
|
4a3166 |
Make sure we don't go over the buffer boundary.
|
|
|
4a3166 |
|
|
|
4a3166 |
Reported-by: Rijnard van Tonder <rvt@cmu.edu>
|
|
|
4a3166 |
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
|
|
|
4a3166 |
(cherry picked from commit ce06fb6069065c3d68475356c0728a5fa0a4ab74)
|
|
|
4a3166 |
---
|
|
|
4a3166 |
src/read_config_yy.y | 3 ++-
|
|
|
4a3166 |
1 file changed, 2 insertions(+), 1 deletion(-)
|
|
|
4a3166 |
|
|
|
4a3166 |
diff --git a/src/read_config_yy.y b/src/read_config_yy.y
|
|
|
4a3166 |
index 6de8c6c734389..1d510ed20ec8f 100644
|
|
|
4a3166 |
--- a/src/read_config_yy.y
|
|
|
4a3166 |
+++ b/src/read_config_yy.y
|
|
|
4a3166 |
@@ -25,6 +25,7 @@
|
|
|
4a3166 |
#include <netdb.h>
|
|
|
4a3166 |
#include <errno.h>
|
|
|
4a3166 |
#include <stdarg.h>
|
|
|
4a3166 |
+#include <limits.h>
|
|
|
4a3166 |
#include "conntrackd.h"
|
|
|
4a3166 |
#include "bitops.h"
|
|
|
4a3166 |
#include "cidr.h"
|
|
|
4a3166 |
@@ -650,7 +651,7 @@ unix_options:
|
|
|
4a3166 |
|
|
|
4a3166 |
unix_option : T_PATH T_PATH_VAL
|
|
|
4a3166 |
{
|
|
|
4a3166 |
- strcpy(conf.local.path, $2);
|
|
|
4a3166 |
+ strncpy(conf.local.path, $2, PATH_MAX);
|
|
|
4a3166 |
};
|
|
|
4a3166 |
|
|
|
4a3166 |
unix_option : T_BACKLOG T_NUMBER
|
|
|
4a3166 |
--
|
|
|
4a3166 |
2.34.1
|
|
|
4a3166 |
|