Date: Mon, 16 Jan 2006 00:52:20 +0000 (UTC) From: Robert Watson <rwatson@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/lib/libutil login_times.c Message-ID: <200601160052.k0G0qKSu041002@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
rwatson 2006-01-16 00:52:20 UTC FreeBSD src repository Modified files: lib/libutil login_times.c Log: Replace strncpy() with strlcpy() when parsing login time limit strings from /etc/login.conf, or an unterminated string buffer could result. Probably, login_times.c should reject excessively long time strings as unparseable, rather than truncating, which might render an invalid string valid. Found with: Coverity Prevent (tm) Reviewed by: csjp MFC after: 3 days Revision Changes Path 1.10 +1 -1 src/lib/libutil/login_times.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200601160052.k0G0qKSu041002>