Date: Mon, 13 Oct 2003 00:24:23 -0700 (PDT) From: "Tim J. Robbins" <tjr@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/usr.sbin/lpr/lpc lpc.c Message-ID: <200310130724.h9D7ONIu004842@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
tjr 2003/10/13 00:24:23 PDT
FreeBSD src repository
Modified files:
usr.sbin/lpr/lpc lpc.c
Log:
Fix two buffer overflows caused by off-by-one errors: avoid writing a null
character 1 byte past the end of cmdline[] when libedit is being used for
input, and avoid writing a null pointer 1 element past the end of margv[].
Reviewed by: gad
Revision Changes Path
1.28 +2 -2 src/usr.sbin/lpr/lpc/lpc.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200310130724.h9D7ONIu004842>