|
|
- From 1e8b82388578a622c5caf8fa04c238fdd7808ecc Mon Sep 17 00:00:00 2001
- From: Yousong Zhou <yszhou4tech@gmail.com>
- Date: Thu, 30 Apr 2015 13:53:40 +0800
- Subject: [PATCH 6/7] xl2tpd: fix possible buffer overflow when filling
- stropt[].
-
- ---
- xl2tpd.c | 3 ++-
- 1 file changed, 2 insertions(+), 1 deletion(-)
-
- --- a/xl2tpd.c
- +++ b/xl2tpd.c
- @@ -490,7 +490,8 @@ int start_pppd (struct call *c, struct p
-
- {
- struct ppp_opts *p = opts;
- - while (p)
- + int maxn_opts = sizeof(stropt) / sizeof(stropt[0]) - 1;
- + while (p && pos < maxn_opts)
- {
- stropt[pos] = strdup (p->option);
- pos++;
|