diff options
| author | Tobias Klauser <tklauser@distanz.ch> | 2009-05-23 15:14:45 +0200 |
|---|---|---|
| committer | Tobias Klauser <tklauser@distanz.ch> | 2009-05-23 15:14:45 +0200 |
| commit | e016103fa25167594b9ff5d410019f114b7a36fb (patch) | |
| tree | 0fd8b5b9c824f3611c24ed00dcbc2058579e15a1 /src/vpaccess.c | |
| parent | 04b38c4c173cef3b1b12163f1cf5a9b3cef8cb4a (diff) | |
New upstream release 15.7a, fixing CVE-2009-014815-7a-1
Diffstat (limited to 'src/vpaccess.c')
| -rw-r--r-- | src/vpaccess.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/vpaccess.c b/src/vpaccess.c index cb56730..607cee1 100644 --- a/src/vpaccess.c +++ b/src/vpaccess.c @@ -30,7 +30,7 @@ DAMAGE. =========================================================================*/ -/* $Id: vpaccess.c,v 1.2 2000/05/03 22:02:10 petr Exp $ */ +/* $Id: vpaccess.c,v 1.3 2009/04/10 13:39:23 broeker Exp $ */ /* vpaccess - view path version of the access system call */ @@ -49,7 +49,7 @@ vpaccess(char *path, mode_t amode) if ((returncode = access(path, amode)) == -1 && path[0] != '/') { vpinit(NULL); for (i = 1; i < vpndirs; i++) { - (void) sprintf(buf, "%s/%s", vpdirs[i], path); + (void) snprintf(buf, sizeof(buf), "%s/%s", vpdirs[i], path); if ((returncode = access(buf, amode)) != -1) { break; } |