Re: [dev][sbase] Readlink doesn't null-terminate buf

From: Galos, David <galosd83_AT_students.rowan.edu>
Date: Tue, 9 Jul 2013 17:48:47 -0400

> The patch introduces buffer overflow. sizeof(buf)-1 should be passed
> to readlink().

Furthermore, buf should be made (PATH_MAX + 1) bytes in size, so that
valid paths don't get truncated.
Received on Tue Jul 09 2013 - 23:48:47 CEST