e8a79c9ec7
After copying uts->nodename to the static nodename array the static version isn't necessarily zero termininated, since the size of the array is one byte too short. Afterwards doing strncat(data, nodename, strlen(nodename)); may copy an arbitrary large amount of bytes. Fix this by getting rid of the static array and using strncat with proper length limit. Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com> Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com> |
||
---|---|---|
.. | ||
con3215.c | ||
con3270.c | ||
ctrlchar.c | ||
ctrlchar.h | ||
defkeymap.c | ||
defkeymap.map | ||
fs3270.c | ||
Kconfig | ||
keyboard.c | ||
keyboard.h | ||
Makefile | ||
monreader.c | ||
monwriter.c | ||
raw3270.c | ||
raw3270.h | ||
sclp_async.c | ||
sclp_cmd.c | ||
sclp_con.c | ||
sclp_config.c | ||
sclp_cpi_sys.c | ||
sclp_cpi_sys.h | ||
sclp_cpi.c | ||
sclp_quiesce.c | ||
sclp_rw.c | ||
sclp_rw.h | ||
sclp_sdias.c | ||
sclp_tty.c | ||
sclp_tty.h | ||
sclp_vt220.c | ||
sclp.c | ||
sclp.h | ||
tape_34xx.c | ||
tape_3590.c | ||
tape_3590.h | ||
tape_block.c | ||
tape_char.c | ||
tape_class.c | ||
tape_class.h | ||
tape_core.c | ||
tape_proc.c | ||
tape_std.c | ||
tape_std.h | ||
tape.h | ||
tty3270.c | ||
tty3270.h | ||
vmcp.c | ||
vmcp.h | ||
vmlogrdr.c | ||
vmur.c | ||
vmur.h | ||
vmwatchdog.c | ||
zcore.c |