- markus@cvs.openbsd.org 2002/01/11 23:26:30

[auth-skey.c]
     use snprintf; mouring@

ChangeLog

@@ -146,6 +146,9 @@
    - markus@cvs.openbsd.org 2002/01/11 23:02:51
      [auth2-chall.c]
      use snprintf; mouring@
+   - markus@cvs.openbsd.org 2002/01/11 23:26:30
+     [auth-skey.c]
+     use snprintf; mouring@
 
 
 20020121
@@ -7294,4 +7297,4 @@
  - Wrote replacements for strlcpy and mkdtemp
  - Released 1.0pre1
 
-$Id: ChangeLog,v 1.1764 2002/01/22 12:25:08 djm Exp $
+$Id: ChangeLog,v 1.1765 2002/01/22 12:25:30 djm Exp $

auth-skey.c

@@ -22,7 +22,7 @@
  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 #include "includes.h"
-RCSID("$OpenBSD: auth-skey.c,v 1.14 2002/01/11 20:14:11 markus Exp $");
+RCSID("$OpenBSD: auth-skey.c,v 1.15 2002/01/11 23:26:30 markus Exp $");
 
 #ifdef SKEY
 
@@ -60,8 +60,7 @@ skey_query(void *ctx, char **name, char **infotxt,
 
 	len = strlen(challenge) + strlen(PROMPT) + 1;
 	p = xmalloc(len);
-	strlcpy(p, challenge, len);
-	strlcat(p, PROMPT, len);
+	snprintf(p, len, "%s%s", challenge, PROMPT);
 	(*prompts)[0] = p;
 
 	return 0;