diff options
| author | Archie Cobbs <archie@FreeBSD.org> | 2000-06-02 21:51:36 +0000 |
|---|---|---|
| committer | Archie Cobbs <archie@FreeBSD.org> | 2000-06-02 21:51:36 +0000 |
| commit | 7273f8bc176db948f354a261a7d72271929893e7 (patch) | |
| tree | b377c6a82ad59432769b7cb8e612c988e2b7c0ed /lib/libnetgraph | |
| parent | 7d664a2f47215baecb5c2620632086edf1d7917c (diff) | |
| download | src-7273f8bc176db948f354a261a7d72271929893e7.tar.gz src-7273f8bc176db948f354a261a7d72271929893e7.zip | |
Fix buffer overflow bug in NgSendAsciiMsg().
Notes
Notes:
svn path=/head/; revision=61188
Diffstat (limited to 'lib/libnetgraph')
| -rw-r--r-- | lib/libnetgraph/msg.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/libnetgraph/msg.c b/lib/libnetgraph/msg.c index ece1787f2b7e..bae4743e5a50 100644 --- a/lib/libnetgraph/msg.c +++ b/lib/libnetgraph/msg.c @@ -115,7 +115,7 @@ NgSendAsciiMsg(int cs, const char *path, const char *fmt, ...) /* Get a bigger buffer to hold inner message header plus arg string */ if ((ascii = malloc(sizeof(struct ng_mesg) - + strlen(buf) + 1)) == NULL) { + + strlen(args) + 1)) == NULL) { free(buf); return (-1); } |