From 9010012aa140c0301d1ae1121a0f4d16b22dcb0b Mon Sep 17 00:00:00 2001 From: Donald Sharp Date: Wed, 1 Feb 2017 19:51:31 -0500 Subject: [PATCH] lib: Fix possible array overrun It is possible if the hostname is > 32 characters that we would just overrun the client_name data structure. Truncate the hostname string to 31 characters (to allow for NULL) Signed-off-by: Donald Sharp --- lib/ptm_lib.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/ptm_lib.c b/lib/ptm_lib.c index 0666797fad..a93d7b8476 100644 --- a/lib/ptm_lib.c +++ b/lib/ptm_lib.c @@ -458,7 +458,7 @@ ptm_lib_register(char *client_name, hdl = calloc(1, sizeof(*hdl)); if (hdl) { - strcpy(hdl->client_name, client_name); + strncpy(hdl->client_name, client_name, PTMLIB_MAXNAMELEN - 1); hdl->cmd_cb = cmd_cb; hdl->notify_cb = notify_cb; hdl->response_cb = response_cb; -- 2.39.5