mirror of
https://github.com/sheumann/telnetd.git
synced 2024-05-29 10:41:40 +00:00
vsnprintf() can return a value larger than the buffer size.
Submitted by: assar Obtained from: OpenBSD git-svn-id: http://svn0.us-east.freebsd.org/base/head/contrib/telnet@79992 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
This commit is contained in:
parent
b3fb8c9630
commit
819182e3f6
|
@ -1631,7 +1631,7 @@ output_data(const char *format, ...)
|
||||||
remaining = BUFSIZ - (nfrontp - netobuf);
|
remaining = BUFSIZ - (nfrontp - netobuf);
|
||||||
}
|
}
|
||||||
ret = vsnprintf(nfrontp, remaining, format, args);
|
ret = vsnprintf(nfrontp, remaining, format, args);
|
||||||
nfrontp += ret;
|
nfrontp += ((ret < remaining - 1) ? ret : remaining - 1);
|
||||||
va_end(args);
|
va_end(args);
|
||||||
return ret;
|
return ret;
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in New Issue
Block a user