1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-15 10:17:20 +00:00

Fix (static) buffer overflow bug. The dest buffer is of size MAXPATHLEN,

so dest[MAXPATHLEN] falls outside the buffer.  This bug corrupted
arenas[0] defined in libc's malloc.c on PowerPC when kldxref is shared,
which triggered a delayed SIGSERV.
This commit is contained in:
Marcel Moolenaar 2006-08-04 21:28:42 +00:00
parent 43bc7a9c62
commit 77a6f8ac6f
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=160982

View File

@ -260,7 +260,7 @@ maketempfile(char *dest, const char *root)
int fd;
strncpy(dest, root, MAXPATHLEN - 1);
dest[MAXPATHLEN] = '\0';
dest[MAXPATHLEN-1] = '\0';
if ((p = strrchr(dest, '/')) != 0)
p++;