Update of /cvsroot/qmailadmin/qmailadmin
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv21238
Modified Files:
Tag: stable-1_2
ChangeLog qmailadmin.c
Log Message:
Fix potential buffer overflow. (from Peter Pentchev)
Index: qmailadmin.c
===================================================================
RCS file: /cvsroot/qmailadmin/qmailadmin/qmailadmin.c,v
retrieving revision 1.6.2.10
retrieving revision 1.6.2.11
diff -u -d -r1.6.2.10 -r1.6.2.11
--- qmailadmin.c 10 Aug 2005 17:42:49 -0000 1.6.2.10
+++ qmailadmin.c 5 Feb 2006 17:03:44 -0000 1.6.2.11
@@ -129,7 +129,7 @@
pi=getenv("PATH_INFO");
if ( pi ) pi = strdup(pi);
- if (pi) strcpy (TmpBuf2, pi+5);
+ if (pi) snprintf (TmpBuf2, sizeof(TmpBuf2), "%s", pi + 5);
rm = getenv("REQUEST_METHOD");
rm = (rm == NULL ? "" : strdup(rm));
Index: ChangeLog
===================================================================
RCS file: /cvsroot/qmailadmin/qmailadmin/ChangeLog,v
retrieving revision 1.15.2.79
retrieving revision 1.15.2.80
diff -u -d -r1.15.2.79 -r1.15.2.80
--- ChangeLog 5 Feb 2006 16:59:08 -0000 1.15.2.79
+++ ChangeLog 5 Feb 2006 17:03:44 -0000 1.15.2.80
@@ -4,7 +4,8 @@
1.2.10 - unreleased
Peter Pentchev
- - Update Bulgarian translation.
+ - Update Bulgarian translation. [1421770]
+ - qmailadmin.c: Fix potential buffer overflow.
Tom Collins
- mailinglist.c: Fix problem with enable/disable ezmlm-cgi access
|