passing in a very long interface name could make a buffer overflow

This commit is contained in:
Daniel Stenberg 2004-06-30 11:48:19 +00:00
Родитель c14650caec
Коммит 4af08a19f8
1 изменённых файлов: 4 добавлений и 1 удалений

Просмотреть файл

@ -94,8 +94,11 @@ char *Curl_if2ip(const char *interface, char *buf, int buf_size)
}
else {
struct ifreq req;
size_t len = strlen(interface);
memset(&req, 0, sizeof(req));
strcpy(req.ifr_name, interface);
if(len >= sizeof(req.ifr_name))
return NULL; /* this can't be a fine interface name */
memcpy(req.ifr_name, interface, len+1);
req.ifr_addr.sa_family = AF_INET;
#ifdef IOCTL_3_ARGS
if (SYS_ERROR == ioctl(dummy, SIOCGIFADDR, &req)) {