Hello,

Attached patch fixes httpd's authentication config parser in BusyBox 1.7.1. With gcc/glibc the original code is the same as "sprintf(p0,":%s",c);".
--- f/networking/httpd.c	2007-09-25 10:01:28.000000000 +0300
+++ busybox-1.7.1/networking/httpd.c	2007-09-25 10:00:25.000000000 +0300
@@ -598,7 +598,7 @@
 				++p;                             /* so keep last character */
 			}
 			*p = '\0';
-			sprintf(p0, "%s:%s", p0, c);
+			sprintf(p0 + strlen(p0), ":%s", c);
 		}
 #endif
 
_______________________________________________
busybox mailing list
[email protected]
http://busybox.net/cgi-bin/mailman/listinfo/busybox

Reply via email to