Re: [opensuse-packaging] fcron Bufferoverflow

On 02/12/09 17:24, Sascha 'saigkill' Manns wrote:

I: Statement might be overflowing a buffer in strncat. Common mistake: BAD: strncat(buffer,charptr,sizeof(buffer)) is wrong, it takes the left over size as 3rd argument GOOD: strncat(buffer,charptr,sizeof(buffer)-strlen(buffer)-1) E: fcron bufferoverflowstrncat socket.c:297

see https://buildsecurityin.us-cert.gov/daisy/bsi-rules/home/g1/853-BSI.html. -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-packaging+help@opensuse.org