diff options
| author | Corinna Vinschen <corinna@vinschen.de> | 2016-10-23 18:02:24 +0300 |
|---|---|---|
| committer | Corinna Vinschen <corinna@vinschen.de> | 2016-10-23 18:04:55 +0300 |
| commit | 526107a7536c3ae8d7de2b38bc668b940f52ca35 (patch) | |
| tree | 3f7c04df87d156767b5d46fd859be7c2ae8cff54 /winsup/utils/mkpasswd.c | |
| parent | 7d5af6f0ba06d8f1c49912e42a863c09ed6710af (diff) | |
mkgroup/mkpasswd: Fix potential buffer overwrite in corner case
Fixes Coverity CIDs 60076, 60077 and 60081
Signed-off-by: Corinna Vinschen <corinna@vinschen.de>
Diffstat (limited to 'winsup/utils/mkpasswd.c')
| -rw-r--r-- | winsup/utils/mkpasswd.c | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/winsup/utils/mkpasswd.c b/winsup/utils/mkpasswd.c index 27c607f47..9562eacbd 100644 --- a/winsup/utils/mkpasswd.c +++ b/winsup/utils/mkpasswd.c @@ -312,10 +312,12 @@ enum_users (domlist_t *mach, const char *sep, const char *passed_home_path, else if (acc_type == SidTypeDomain) { WCHAR domname[MAX_DOMAIN_NAME_LEN + UNLEN + 2]; + PWCHAR p; - wcscpy (domname, machine); - wcscat (domname, L"\\"); - wcscat (domname, buffer[i].usri3_name); + p = wcpcpy (domname, machine); + p = wcpcpy (p, L"\\"); + p = wcpncpy (p, buffer[i].usri3_name, UNLEN); + *p = L'\0'; sid_length = SECURITY_MAX_SID_SIZE; domname_len = sizeof (domname); if (!LookupAccountNameW (machine, domname, psid, |