diff options
| author | Florian Lohoff <f@zz.de> | 2021-02-15 14:34:07 (GMT) |
|---|---|---|
| committer | Jan Wagner <waja@cyconet.org> | 2021-04-10 11:43:12 (GMT) |
| commit | 0d504aea51f4835f038ce1943175c943a4b6b1eb (patch) | |
| tree | 2e5b3934ee205b7faed6a262e4ec6af1a0e7a63e /gl/strcasestr.c | |
| parent | e7598ae6377659430f38a5360aeb09d8a26b8e1a (diff) | |
| download | monitoring-plugins-0d504aea51f4835f038ce1943175c943a4b6b1eb.tar.gz | |
Using snprintf which honors the buffers size and guarantees null termination. (Closes: #1601)
As strcpy may overflow the resulting buffer:
flo@p5:~$ /tmp/f/usr/lib/nagios/plugins/check_pgsql -d "$(seq 1 10000)"
*** buffer overflow detected ***: terminated
Aborted
I would propose to change the code rather like this, using snprintf
which honors the buffers size and guarantees null termination.
Diffstat (limited to 'gl/strcasestr.c')
0 files changed, 0 insertions, 0 deletions