Bugtraq mailing list archives

Re: simple kde exploit fix


From: thospel () mail dma be (Ton Hospel)
Date: Sun, 17 May 1998 23:38:06 GMT


Better fixing style:

   char *env;
   int   len;

   env = getenv("HOME");
   if (env) {
      len = strlen(env);
      if (len >= BUFLEN) len = BUFLEN-1;
      memcpy(buffer, env, len);
      env[len] = 0;

Oops, replace that last line by
        buffer[len] = 0;

   } else do_something_intelligent();



Current thread: