Changeset 3854 for branches/libc-0.6

Timestamp:

Mar 17, 2014, 6:15:30 AM (11 years ago)

Author:

bird

Message:

opendir: fixed buffer overflow. Fixes #270.

File:

• branches/libc-0.6/src/emx/src/lib/misc/dirent.c (modified) (2 diffs)

branches/libc-0.6/src/emx/src/lib/misc/dirent.c

@@ -57 +57 @@
     DIR *                   pdir;
     char *                  psz;
-    char                    nbuf[MAXPATHLEN+1];
+    char                    nbuf[MAXPATHLEN+4];
     int                     cchname;
     int                     saved_errno = errno;
@@ -65 +65 @@
      */
     cchname = strlen(name);
+    if (cchname > MAXPATHLEN)
+    {
+        errno = ENAMETOOLONG;
+        LIBCLOG_ERROR_RETURN_P(NULL);
+    }
     memcpy(nbuf, name, cchname + 1);
     psz = nbuf + cchname;