Date: Mon, 16 Jan 2006 00:52:20 +0000 (UTC) From: Robert Watson <rwatson@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/lib/libutil login_times.c Message-ID: <200601160052.k0G0qKSu041002@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2006-01-16 00:52:20 UTC
FreeBSD src repository
Modified files:
lib/libutil login_times.c
Log:
Replace strncpy() with strlcpy() when parsing login time limit strings
from /etc/login.conf, or an unterminated string buffer could result.
Probably, login_times.c should reject excessively long time strings as
unparseable, rather than truncating, which might render an invalid
string valid.
Found with: Coverity Prevent (tm)
Reviewed by: csjp
MFC after: 3 days
Revision Changes Path
1.10 +1 -1 src/lib/libutil/login_times.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200601160052.k0G0qKSu041002>