Re: [SSSD] [PATCH] Properly null-terminate socket path
On 06/14/2010 10:10 AM, Stephen Gallagher wrote:
https://fedorahosted.org/sssd/ticket/540
It was unlikely, but if the path to the socket file exceeded 108
characters, this strncpy would be unterminated and the results could be
unexpected. This was not an exploitable vulnerability.
I forgot to mention, this patch should apply to both master and sssd-1-2.
--
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/