From ebed2088fe1f4e7af8e4bc85346a1d70cb056e83 Mon Sep 17 00:00:00 2001 From: Mike Smith Date: Thu, 29 Oct 1998 23:16:24 +0000 Subject: [PATCH] Prevent buffer overflow in getpwnam() PR: bin/8176 Submitted by: Archie Cobbs --- lib/libc/gen/getpwent.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/libc/gen/getpwent.c b/lib/libc/gen/getpwent.c index 02ec190519f..e24de8123b4 100644 --- a/lib/libc/gen/getpwent.c +++ b/lib/libc/gen/getpwent.c @@ -153,8 +153,8 @@ getpwnam(name) return((struct passwd *)NULL); bf[0] = _PW_KEYBYNAME; - len = strlen(name); - bcopy(name, bf + 1, MIN(len, UT_NAMESIZE)); + len = MIN(strlen(name), UT_NAMESIZE); + bcopy(name, bf + 1, len); key.data = (u_char *)bf; key.size = len + 1; rval = __hashpw(&key);