File sysbench_buffer_overflow.patch of Package sysbench

Overview Repositories Revisions Requests Users Attributes Meta

File sysbench_buffer_overflow.patch of Package sysbench (Revision f38b8e134cf9f8a64e618403eebb39a1)

Currently displaying revision f38b8e134cf9f8a64e618403eebb39a1 , Show latest

From e6fab3260481d03301f135dbfde57fa5db000aaf Mon Sep 17 00:00:00 2001
From: Martin Pluskal <martin@pluskal.org>
Date: Thu, 29 Sep 2016 10:39:47 +0200
Subject: [PATCH] Do not overflow buffer in strncat

---
 sysbench/scripting/script_lua.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/sysbench/scripting/script_lua.c b/sysbench/scripting/script_lua.c
index 42f5106..7b71064 100644
--- a/sysbench/scripting/script_lua.c
+++ b/sysbench/scripting/script_lua.c
@@ -498,11 +498,11 @@ lua_State *sb_lua_new_state(const char *scriptname, int thread_id)
     /* first location failed - look in DATA_PATH */
     char p[PATH_MAX + 1];
     strncpy(p, DATA_PATH LUA_DIRSEP, sizeof(p));
-    strncat(p, scriptname, sizeof(p));
+    strncat(p, scriptname, sizeof(p)-strlen(p)-1);
     if (!strrchr(scriptname, '.'))
     {
       /* add .lua extension if there isn't one */
-      strncat(p, ".lua", sizeof(p));
+      strncat(p, ".lua", sizeof(p)-strlen(p)-1);
     }
 
     if (luaL_loadfile(state, p))

Places

File sysbench_buffer_overflow.patch of Package sysbench (Revision f38b8e134cf9f8a64e618403eebb39a1)

Places