vitalif
/
e2fsprogs
mirror of https://github.com/vitalif/e2fsprogs
1
0
Fork 0
Code Issues Releases Wiki Activity

libss: fix potential buffer overrun in list_rqs 

Addresses-Coverity-Bug: #709516

Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
maint-test
Theodore Ts'o 2014-01-30 17:45:36 -05:00
parent 0dedd011ed
commit 9b36ce0e19
1 changed files with 8 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
lib/ss/list_rqs.c
View File

@ -18,20 +18,15 @@
typedef void sigret_t;
static char const twentyfive_spaces[26] =
" ";
static char const NL[2] = "\n";
void ss_list_requests(int argc __SS_ATTR((unused)),
const char * const *argv __SS_ATTR((unused)),
int sci_idx, void *infop __SS_ATTR((unused)))
{
ss_request_entry *entry;
char const * const *name;
int spacing;
int i, spacing;
ss_request_table **table;
char buffer[BUFSIZ];
FILE *output;
int fd;
sigset_t omask, igmask;
@ -60,27 +55,24 @@ void ss_list_requests(int argc __SS_ATTR((unused)),
entry = (*table)->requests;
for (; entry->command_names; entry++) {
spacing = -2;
buffer[0] = '\0';
if (entry->flags & SS_OPT_DONT_LIST)
continue;
for (name = entry->command_names; *name; name++) {
int len = strlen(*name);
strncat(buffer, *name, len);
fputs(*name, output);
spacing += len + 2;
if (name[1]) {
strcat(buffer, ", ");
fputs(", ", output);
}
}
if (spacing > 23) {
strcat(buffer, NL);
fputs(buffer, output);
fputc('\n', output);
spacing = 0;
buffer[0] = '\0';
}
strncat(buffer, twentyfive_spaces, 25-spacing);
strcat(buffer, entry->info_string);
strcat(buffer, NL);
fputs(buffer, output);
for (i = 0; i < 25 - spacing; i++)
fputc(' ', output);
fputs(entry->info_string, output);
fputc('\n', output);
}
}
fclose(output);