2004-03-01 Roland McGrath <roland@redhat.com>

* strace.c (main): Avoid potential buffer overruns from ludicrous arguments or PATH values. * syscall.c (qual_signal): Bail out for too-long string.
2004-03-02 06:52:01 +00:00 · 2004-03-02 06:52:01 +00:00 · d62b6711b4
commit d62b6711b4
parent bdb09df186
1 changed files with 2 additions and 0 deletions
--- a/syscall.c
+++ b/syscall.c
@ -302,6 +302,8 @@ qual_signal(s, opt, not)
 		qualify_one(atoi(s), opt, not);
 		return 1;
 	}
+	if (strlen(s) >= sizeof buf)
+		return 0;
 	strcpy(buf, s);
 	s = buf;
 	for (i = 0; s[i]; i++)