diff options
| author | Brooks Davis <brooks@FreeBSD.org> | 2005-08-24 00:05:04 +0000 |
|---|---|---|
| committer | Brooks Davis <brooks@FreeBSD.org> | 2005-08-24 00:05:04 +0000 |
| commit | 1469b42c7d52967d77278f6aa26a821536d6a68e (patch) | |
| tree | ecdd5668649acf5a0ba1be7f4c1bfe1e176ada73 /sbin/dhclient | |
| parent | 8794fdbb485ba9cb02a599a63fe7478605baa4a5 (diff) | |
| download | src-1469b42c7d52967d77278f6aa26a821536d6a68e.tar.gz src-1469b42c7d52967d77278f6aa26a821536d6a68e.zip | |
MFOpenBSD rev 1.9: fix a buffer overflow when processing config file
lines that are exactly 81 characters in length.
Obtained from: OpenBSD
MFC After: 3 days
Notes
Notes:
svn path=/head/; revision=149400
Diffstat (limited to 'sbin/dhclient')
| -rw-r--r-- | sbin/dhclient/conflex.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sbin/dhclient/conflex.c b/sbin/dhclient/conflex.c index 39409a96e81b..c33019173833 100644 --- a/sbin/dhclient/conflex.c +++ b/sbin/dhclient/conflex.c @@ -104,7 +104,7 @@ get_char(FILE *cfile) lpos = 1; cur_line[0] = 0; } else if (c != EOF) { - if (lpos <= 81) { + if (lpos < sizeof(line1)) { cur_line[lpos - 1] = c; cur_line[lpos] = 0; } |