Hi,

wcsncpy on NetBSD 3.0 has a buffer overflow bug by writing extra '\0'.
http://cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/string/wcsncpy.c?rev=1.2&content-type=text/x-cvsweb-markup
This bug has been fixed on NetBSD-current, but not backported to 3.0.

NetBSD users should change fallback.c as following to prevent the bug
for the meantime.


Index: fallback.c
===================================================================
--- fallback.c  (revision 785)
+++ fallback.c  (revision 786)
@@ -818,7 +818,7 @@
        {
                return 0;
        }
-       wcsncpy( res, in, c+1 );
+       wcsncpy( res, in, c );
        res[c] = L'\0';
        return res;
 }


--
Hiroshi SAKURAI
http://vimrc.hp.infoseek.co.jp/


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid0944&bid$1720&dat1642
_______________________________________________
Fish-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fish-users

Reply via email to