wt/dnsmasq
1
0 Fork 0
mirror of http://thekelleys.org.uk/git/dnsmasq.git synced 2026-10-23 11:54:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix buffer overflow when configured lease-change script name

Browse Source 
is too long.

Thanks to Daniel Rhea for finding this one.
This commit is contained in:
Simon Kelley committed 2024-11-21 15:42:49 +00:00
1 parent b087cf4a6c
commit ae85ea3858
2 files changed
+8
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

src/lease.c
+4
View File
@@ -150,6 +150,10 @@ void lease_init(time_t now)
#ifdef HAVE_SCRIPT
if (daemon->lease_change_command)
{
/* 6 == strlen(" init") plus terminator */
if (strlen(daemon->lease_change_command) + 6 > DHCP_BUFF_SZ)
die(_("lease-change script name is too long"), NULL, EC_FILE);
strcpy(daemon->dhcp_buff, daemon->lease_change_command);
strcat(daemon->dhcp_buff, " init");
leasestream = popen(daemon->dhcp_buff, "r");