diff options
| author | piaip <piaip@63ad8ddf-47c3-0310-b6dd-a9e9d9715204> | 2005-04-21 17:19:28 +0800 |
|---|---|---|
| committer | piaip <piaip@63ad8ddf-47c3-0310-b6dd-a9e9d9715204> | 2005-04-21 17:19:28 +0800 |
| commit | 2d8ee1c78013c104374613d064565aa7e14c4f2a (patch) | |
| tree | d4b4df26a1745ff0e82a6f752463e1f4f3bf6697 /mbbsd/bbs.c | |
| parent | a6162aedbc643514dccac3058888a81b63ea237d (diff) | |
| download | pttbbs-2d8ee1c78013c104374613d064565aa7e14c4f2a.tar pttbbs-2d8ee1c78013c104374613d064565aa7e14c4f2a.tar.gz pttbbs-2d8ee1c78013c104374613d064565aa7e14c4f2a.tar.bz2 pttbbs-2d8ee1c78013c104374613d064565aa7e14c4f2a.tar.lz pttbbs-2d8ee1c78013c104374613d064565aa7e14c4f2a.tar.xz pttbbs-2d8ee1c78013c104374613d064565aa7e14c4f2a.tar.zst pttbbs-2d8ee1c78013c104374613d064565aa7e14c4f2a.zip | |
buffer overflow: file path [64] is too small!
use PATHLEN instead.
git-svn-id: http://opensvn.csie.org/pttbbs/trunk/pttbbs@2706 63ad8ddf-47c3-0310-b6dd-a9e9d9715204
Diffstat (limited to 'mbbsd/bbs.c')
| -rw-r--r-- | mbbsd/bbs.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/mbbsd/bbs.c b/mbbsd/bbs.c index 4aa5d213..4c009f5e 100644 --- a/mbbsd/bbs.c +++ b/mbbsd/bbs.c @@ -1293,7 +1293,7 @@ do_limitedit(int ent, fileheader_t * fhdr, const char *direct) static int b_man(void) { - char buf[64]; + char buf[PATHLEN]; setapath(buf, currboard); if ((currmode & MODE_BOARD) || HAS_PERM(PERM_SYSOP)) { @@ -2099,7 +2099,7 @@ tar_addqueue(int ent, const fileheader_t * fhdr, const char *direct) int b_note_edit_bname(int bid) { - char buf[64]; + char buf[PATHLEN]; int aborted; boardheader_t *fh = getbcache(bid); setbfile(buf, fh->brdname, fn_notes); @@ -2221,7 +2221,7 @@ bh_title_edit(void) static int b_notes(void) { - char buf[64]; + char buf[PATHLEN]; setbfile(buf, currboard, fn_notes); if (more(buf, NA) == -1) { @@ -2323,7 +2323,7 @@ good_post(int ent, fileheader_t * fhdr, const char *direct) } } else { fileheader_t digest; - char *ptr, buf[64]; + char *ptr, buf[PATHLEN]; memcpy(&digest, fhdr, sizeof(digest)); digest.filename[0] = 'G'; |