This buffer overrun bug in vms.c/mp_do_fileify_dirspec has been there for a while and was made more visible by the recent changes to allow support of longer file names.

This patch should also be applied to the maint and upcoming 5.8 streams.

-John
[EMAIL PROTECTED]
Personal Opinion Only
--- /rsync_root/perl/vms/vms.c  Wed Dec 14 17:04:57 2005
+++ vms/vms.c   Sun Dec 18 18:41:04 2005
@@ -4830,7 +4830,7 @@
           else retspec = __fileify_retbuf;
           cp1 = esa;
           cp2 = retspec;
-          while (*cp1 != ':') *(cp2++) = *(cp1++);
+          while ((*cp1 != ':')  && (*cp1 != '\0')) *(cp2++) = *(cp1++);
           strcpy(cp2,":[000000]");
           cp1 += 2;
           strcpy(cp2+9,cp1);

Reply via email to