7dd7bdb09f
Before "strlen(outbuf)", if one of the pr_*() functions forgot to do it. This prevents an out-of-bounds read in strlen(), and an out-of-bounds write in "outbuf[sz] = '\n'". Another solution would be to replace strlen() with strnlen(), but this is not used anywhere else in the code-base and may not exist in all libc's. |
||
---|---|---|
.. | ||
common.h | ||
COPYING | ||
display.c | ||
global.c | ||
HACKING | ||
help.c | ||
output.c | ||
parser.c | ||
procps.1 | ||
ps.1 | ||
regression | ||
select.c | ||
sortformat.c | ||
stacktrace.c |