- markus@cvs.openbsd.org 2002/01/11 23:02:51

[auth2-chall.c]
     use snprintf; mouring@

ChangeLog

@@ -143,6 +143,9 @@
    - markus@cvs.openbsd.org 2002/01/11 23:02:18
      [readpass.c]
      use _PATH_TTY
+   - markus@cvs.openbsd.org 2002/01/11 23:02:51
+     [auth2-chall.c]
+     use snprintf; mouring@
 
 
 20020121
@@ -7291,4 +7294,4 @@
  - Wrote replacements for strlcpy and mkdtemp
  - Released 1.0pre1
 
-$Id: ChangeLog,v 1.1763 2002/01/22 12:24:51 djm Exp $
+$Id: ChangeLog,v 1.1764 2002/01/22 12:25:08 djm Exp $

auth2-chall.c

@@ -23,7 +23,7 @@
  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 #include "includes.h"
-RCSID("$OpenBSD: auth2-chall.c,v 1.14 2002/01/11 20:14:11 markus Exp $");
+RCSID("$OpenBSD: auth2-chall.c,v 1.15 2002/01/11 23:02:51 markus Exp $");
 
 #include "ssh2.h"
 #include "auth.h"
@@ -291,9 +291,8 @@ input_userauth_info_response(int type, u_int32_t seq, void *ctxt)
 	len = strlen("keyboard-interactive") + 2 +
 		strlen(kbdintctxt->device->name);
 	method = xmalloc(len);
-	strlcpy(method, "keyboard-interactive", len);
-	strlcat(method, "/", len);
-	strlcat(method, kbdintctxt->device->name, len);
+	snprintf(method, len, "keyboard-interactive/%s",
+	    kbdintctxt->device->name);
 
 	if (!authctxt->postponed) {
 		if (authenticated) {