浏览代码

htable: Fix buffer overrun in htable_rpc_list

- Fix for using wrong len variable in htable_rpc_list if
  ht->dbtable.len is greater than 127, causing an out of
  bounds write.
Chris Double 10 年之前
父节点
当前提交
1c164473c6
共有 1 个文件被更改,包括 1 次插入1 次删除
  1. 1 1
      modules/htable/htable.c

+ 1 - 1
modules/htable/htable.c

@@ -1044,7 +1044,7 @@ static void  htable_rpc_list(rpc_t* rpc, void* c)
 		if (ht->dbtable.len > 0) {
 			len = ht->dbtable.len > 127 ? 127 : ht->dbtable.len;
 			memcpy(dbname, ht->dbtable.s, len);
-			dbname[ht->dbtable.len] = '\0';
+			dbname[len] = '\0';
 		} else {
 			dbname[0] = '\0';
 		}