File atftp-CVE-2019-11365.patch of Package atftp

Overview Repositories Revisions Requests Users Attributes Meta

File atftp-CVE-2019-11365.patch of Package atftp

Index: atftp-0.7/tftpd_file.c
===================================================================
--- atftp-0.7.orig/tftpd_file.c
+++ atftp-0.7/tftpd_file.c
@@ -286,9 +286,7 @@ int tftpd_receive_file(struct thread_dat
                          else
                               logger(LOG_WARNING, "source port mismatch, check bypassed");
                     }
-                    Strncpy(string, tftphdr->th_msg,
-                            (((data_size - 4) > MAXLEN) ? MAXLEN :
-                             (data_size - 4)));
+                    Strncpy(string, tftphdr->th_msg, sizeof(string));
                     if (data->trace)
                          logger(LOG_DEBUG, "received ERROR <code: %d, msg: %s>",
                                 ntohs(tftphdr->th_code), string);
@@ -1006,9 +1004,7 @@ int tftpd_send_file(struct thread_data *
                          }
                     }
                     /* Got an ERROR from the current master client */
-                    Strncpy(string, tftphdr->th_msg,
-                            (((data_size - 4) > MAXLEN) ? MAXLEN :
-                             (data_size - 4)));
+                    Strncpy(string, tftphdr->th_msg, sizeof(string));
                     if (data->trace)
                          logger(LOG_DEBUG, "received ERROR <code: %d, msg: %s>",
                                 ntohs(tftphdr->th_code), string);

Places

File atftp-CVE-2019-11365.patch of Package atftp

Places