diff options
author | Andreas Grapentin <andreas@grapentin.org> | 2019-02-09 18:48:46 +0100 |
---|---|---|
committer | Andreas Grapentin <andreas@grapentin.org> | 2019-02-09 18:48:46 +0100 |
commit | 6231995e0cd6245e34a8da5e54c7d282e7534073 (patch) | |
tree | dd679eb1afbbbb95aff625e221070689c53febbf /pcr/reicast-git/no-buffer-overflows.patch | |
parent | 8fac28f1f23b8c69be3ceec4919322a0a41ed0af (diff) | |
download | abslibre-6231995e0cd6245e34a8da5e54c7d282e7534073.tar.gz abslibre-6231995e0cd6245e34a8da5e54c7d282e7534073.tar.bz2 abslibre-6231995e0cd6245e34a8da5e54c7d282e7534073.zip |
pcr/reicast-git: ancient and unmaintained. removed
Diffstat (limited to 'pcr/reicast-git/no-buffer-overflows.patch')
-rw-r--r-- | pcr/reicast-git/no-buffer-overflows.patch | 587 |
1 files changed, 0 insertions, 587 deletions
diff --git a/pcr/reicast-git/no-buffer-overflows.patch b/pcr/reicast-git/no-buffer-overflows.patch deleted file mode 100644 index 401013231..000000000 --- a/pcr/reicast-git/no-buffer-overflows.patch +++ /dev/null @@ -1,587 +0,0 @@ -diff -Nur a/core/cfg/cfg.cpp b/core/cfg/cfg.cpp ---- a/core/cfg/cfg.cpp 2016-05-18 07:26:31.884806485 -0300 -+++ b/core/cfg/cfg.cpp 2016-05-18 08:14:04.874168496 -0300 -@@ -128,7 +128,8 @@ - void cfgLoadStr(const wchar * Section, const wchar * Key, wchar * Return,const wchar* Default) - { - string value = cfgdb.get(Section, Key, Default); -- strcpy(Return, value.c_str()); -+ strncpy(Return, value.c_str(), sizeof(Return)); -+ Return[sizeof(Return) - 1] = '\0'; - } - - string cfgLoadStr(const wchar * Section, const wchar * Key, const wchar* Default) -diff -Nur a/core/cfg/ini.cpp b/core/cfg/ini.cpp ---- a/core/cfg/ini.cpp 2016-05-18 07:26:31.884806485 -0300 -+++ b/core/cfg/ini.cpp 2016-05-18 08:12:22.452503951 -0300 -@@ -221,7 +221,8 @@ - if (tl[0] == '[' && tl[strlen(tl)-1] == ']') - { - tl[strlen(tl)-1] = '\0'; -- strcpy(current_section, tl+1); -+ strncpy(current_section, tl+1, sizeof(current_section)); -+ current_section[sizeof(current_section) - 1] = '\0'; - trim_ws(current_section); - } - else -diff -Nur a/core/deps/libwebsocket/client.c b/core/deps/libwebsocket/client.c ---- a/core/deps/libwebsocket/client.c 2016-05-18 07:26:31.928140639 -0300 -+++ b/core/deps/libwebsocket/client.c 2016-05-18 08:29:26.276930099 -0300 -@@ -871,7 +871,8 @@ - lws_hdr_simple_ptr(wsi, _WSI_TOKEN_CLIENT_HOST)); - p += sprintf(p, - "Upgrade: websocket\x0d\x0a""Connection: Upgrade\x0d\x0a""Sec-WebSocket-Key: "); -- strcpy(p, key_b64); -+ strncpy(p, key_b64, sizeof(p)); -+ p[sizeof(p) - 1] = '\0'; - p += strlen(key_b64); - p += sprintf(p, "\x0d\x0a"); - if (lws_hdr_simple_ptr(wsi, _WSI_TOKEN_CLIENT_ORIGIN)) -diff -Nur a/core/deps/libwebsocket/context.c b/core/deps/libwebsocket/context.c ---- a/core/deps/libwebsocket/context.c 2016-05-18 07:26:31.928140639 -0300 -+++ b/core/deps/libwebsocket/context.c 2016-05-18 08:23:42.720827986 -0300 -@@ -167,7 +167,8 @@ - - context->user_space = info->user; - -- strcpy(context->canonical_hostname, "unknown"); -+ strncpy(context->canonical_hostname, "unknown", sizeof(context->canonical_hostname)); -+ context->canonical_hostname[sizeof(context->canonical_hostname) - 1] = '\0'; - - lws_server_get_canonical_hostname(context, info); - -diff -Nur a/core/deps/libwebsocket/libwebsockets.c b/core/deps/libwebsocket/libwebsockets.c ---- a/core/deps/libwebsocket/libwebsockets.c 2016-05-18 07:26:31.928140639 -0300 -+++ b/core/deps/libwebsocket/libwebsockets.c 2016-05-18 08:25:22.529251490 -0300 -@@ -526,7 +526,8 @@ - - if (u - wsi->latency_start > context->worst_latency) { - context->worst_latency = u - wsi->latency_start; -- strcpy(context->worst_latency_info, buf); -+ strncpy(context->worst_latency_info, buf, sizeof(context->worst_latency_info)); -+ context->worst_latency_info[sizeof(context->worst_latency_info) - 1] = '\0'; - } - lwsl_latency("%s", buf); - } -diff -Nur a/core/deps/libwebsocket/parsers.c b/core/deps/libwebsocket/parsers.c ---- a/core/deps/libwebsocket/parsers.c 2016-05-18 07:26:31.931474036 -0300 -+++ b/core/deps/libwebsocket/parsers.c 2016-05-18 08:27:14.004563720 -0300 -@@ -99,8 +99,9 @@ - return 0; - - do { -- strcpy(dest, -- &wsi->u.hdr.ah->data[wsi->u.hdr.ah->frags[n].offset]); -+ strncpy(dest, -+ &wsi->u.hdr.ah->data[wsi->u.hdr.ah->frags[n].offset], sizeof(dest)); -+ dest[sizeof(dest) - 1] = '\0'; - dest += wsi->u.hdr.ah->frags[n].len; - n = wsi->u.hdr.ah->frags[n].next_frag_index; - } while (n); -diff -Nur a/core/deps/libwebsocket/server-handshake.c b/core/deps/libwebsocket/server-handshake.c ---- a/core/deps/libwebsocket/server-handshake.c 2016-05-18 07:26:31.934807432 -0300 -+++ b/core/deps/libwebsocket/server-handshake.c 2016-05-18 09:05:43.379609693 -0300 -@@ -21,7 +21,7 @@ - - #include "private-libwebsockets.h" - --#define LWS_CPYAPP(ptr, str) { strcpy(ptr, str); ptr += strlen(str); } -+#define LWS_CPYAPP(ptr, str) { strncpy(ptr, str, sizeof(ptr)); ptr[sizeof(ptr) - 1] = '\0'; ptr += strlen(str); } - #ifndef LWS_NO_EXTENSIONS - LWS_VISIBLE int - lws_extension_server_handshake(struct libwebsocket_context *context, -@@ -212,7 +212,8 @@ - "Upgrade: WebSocket\x0d\x0a" - "Connection: Upgrade\x0d\x0a" - "Sec-WebSocket-Accept: "); -- strcpy(p, (char *)context->service_buffer); -+ strncpy(p, (char *)context->service_buffer, sizeof(p)); -+ p[sizeof(p) - 1] = '\0'; - p += accept_len; - - if (lws_hdr_total_length(wsi, WSI_TOKEN_PROTOCOL)) { -diff -Nur a/core/deps/libzip/zip_add_dir.c b/core/deps/libzip/zip_add_dir.c ---- a/core/deps/libzip/zip_add_dir.c 2016-05-18 07:26:31.938140829 -0300 -+++ b/core/deps/libzip/zip_add_dir.c 2016-05-18 08:21:20.351686144 -0300 -@@ -60,7 +60,8 @@ - _zip_error_set(&za->error, ZIP_ER_MEMORY, 0); - return -1; - } -- strcpy(s, name); -+ strncpy(s, name, sizeof(s)); -+ s[sizeof(s) - 1] = '\0'; - s[len] = '/'; - s[len+1] = '\0'; - } -diff -Nur a/core/deps/zlib/gzlib.c b/core/deps/zlib/gzlib.c ---- a/core/deps/zlib/gzlib.c 2016-05-18 07:26:31.958141208 -0300 -+++ b/core/deps/zlib/gzlib.c 2016-05-18 08:10:37.647202679 -0300 -@@ -213,7 +213,8 @@ - #if !defined(NO_snprintf) && !defined(NO_vsnprintf) - snprintf(state->path, len + 1, "%s", (const char *)path); - #else -- strcpy(state->path, path); -+ strncpy(state->path, path, sizeof(state->path)); -+ state->path[sizeof(state->path) - 1] = '\0'; - #endif - - /* compute the flags for open() */ -@@ -607,7 +608,8 @@ - snprintf(state->msg, strlen(state->path) + strlen(msg) + 3, - "%s%s%s", state->path, ": ", msg); - #else -- strcpy(state->msg, state->path); -+ strncpy(state->msg, state->path, sizeof(state->msg)); -+ state->msg[sizeof(state->msg) - 1] = '\0'; - strcat(state->msg, ": "); - strcat(state->msg, msg); - #endif -diff -Nur a/core/hw/flashrom/flashrom.h b/core/hw/flashrom/flashrom.h ---- a/core/hw/flashrom/flashrom.h 2016-05-18 07:26:31.978141586 -0300 -+++ b/core/hw/flashrom/flashrom.h 2016-05-18 07:40:53.826766511 -0300 -@@ -63,7 +63,8 @@ - wchar base[512]; - wchar temp[512]; - wchar names[512]; -- strcpy(names,names_ro.c_str()); -+ strncpy(names,names_ro.c_str(),sizeof(names)); -+ names[sizeof(names) - 1] = '\0'; - sprintf(base,"%s",root.c_str()); - - wchar* curr=names; -diff -Nur a/core/hw/naomi/naomi_cart.cpp b/core/hw/naomi/naomi_cart.cpp ---- a/core/hw/naomi/naomi_cart.cpp 2016-05-18 07:26:31.988141776 -0300 -+++ b/core/hw/naomi/naomi_cart.cpp 2016-05-18 07:38:20.557239856 -0300 -@@ -33,7 +33,8 @@ - folder_pos++; - - char t[512]; -- strcpy(t, file); -+ strncpy(t, file, sizeof(t)); -+ t[sizeof(t) - 1] = '\0'; - FILE* fl = fopen(t, "r"); - if (!fl) - return false; -@@ -92,7 +93,8 @@ - RomCacheMapCount = (u32)files.size(); - RomCacheMap = new fd_t[files.size()]; - -- strcpy(t, file); -+ strncpy(t, file, sizeof(t)); -+ t[sizeof(t) - 1] = '\0'; - t[folder_pos] = 0; - strcat(t, "ndcn-composed.cache"); - -@@ -106,7 +108,8 @@ - verify(RomPtr != 0); - verify(RomPtr != (void*)-1); - -- strcpy(t, file); -+ strncpy(t, file, sizeof(t)); -+ t[sizeof(t) - 1] = '\0'; - - //Create File Mapping Objects - for (size_t i = 0; i<files.size(); i++) -diff -Nur a/core/imgread/common.cpp b/core/imgread/common.cpp ---- a/core/imgread/common.cpp 2016-05-18 07:26:32.018142344 -0300 -+++ b/core/imgread/common.cpp 2016-05-18 08:01:47.097240088 -0300 -@@ -179,7 +179,8 @@ - } - - wchar fn[512]; -- strcpy(fn,settings.imgread.LastImage); -+ strncpy(fn,settings.imgread.LastImage,sizeof(fn)); -+ fn[sizeof(fn) - 1] = '\0'; - #ifdef BUILD_DREAMCAST - int gfrv=GetFile(fn,0,fileflags); - #else -@@ -199,7 +200,8 @@ - return false; - } - -- strcpy(settings.imgread.LastImage,fn); -+ strncpy(settings.imgread.LastImage,fn,sizeof(settings.imgread.LastImage)); -+ settings.imgread.LastImage[sizeof(settings.imgread.LastImage) - 1] = '\0'; - SaveSettings(); - - if (!InitDrive_(fn)) -@@ -233,7 +235,8 @@ - } - - wchar fn[512]; -- strcpy(fn,settings.imgread.LastImage); -+ strncpy(fn,settings.imgread.LastImage,sizeof(fn)); -+ fn[sizeof(fn) - 1] = '\0'; - #ifdef BUILD_DREAMCAST - int gfrv=GetFile(fn,0,fileflags); - #else -@@ -256,7 +259,8 @@ - return false; - } - -- strcpy(settings.imgread.LastImage,fn); -+ strncpy(settings.imgread.LastImage,fn,sizeof(settings.imgread.LastImage)); -+ settings.imgread.LastImage[sizeof(settings.imgread.LastImage) - 1] = '\0'; - SaveSettings(); - - if (!InitDrive_(fn)) -diff -Nur a/core/imgread/gdi.cpp b/core/imgread/gdi.cpp ---- a/core/imgread/gdi.cpp 2016-05-18 07:26:32.021475740 -0300 -+++ b/core/imgread/gdi.cpp 2016-05-18 08:04:36.580422753 -0300 -@@ -32,7 +32,8 @@ - printf("\nGDI : %d tracks\n",iso_tc); - - char path[512]; -- strcpy(path,file); -+ strncpy(path,file,sizeof(path)); -+ path[sizeof(path) - 1] = '\0'; - size_t len=strlen(file); - while (len>2) - { -@@ -87,7 +88,8 @@ - - if (SSIZE!=0) - { -- strcpy(pathptr, track_filename.c_str()); -+ strncpy(pathptr, track_filename.c_str(),sizeof(pathptr)); -+ pathptr[sizeof(pathptr) - 1] = '\0'; - t.file = new RawTrackFile(core_fopen(path),OFFSET,t.StartFAD,SSIZE); - } - disc->tracks.push_back(t); -diff -Nur a/core/nullDC.cpp b/core/nullDC.cpp ---- a/core/nullDC.cpp 2016-05-18 07:26:32.041476119 -0300 -+++ b/core/nullDC.cpp 2016-05-18 08:06:38.942720450 -0300 -@@ -62,7 +62,8 @@ - if (GetOpenFileNameA(&ofn)) - { - //already there -- //strcpy(szFileName,ofn.lpstrFile); -+ //strncpy(szFileName,ofn.lpstrFile,sizeof(szFileName)); -+ //szFileName[sizeof(szFileName) - 1] = '\0'; - } - #endif - } -diff -Nur a/core/webui/server.cpp b/core/webui/server.cpp ---- a/core/webui/server.cpp 2016-05-18 07:26:32.061476498 -0300 -+++ b/core/webui/server.cpp 2016-05-18 07:46:18.756291583 -0300 -@@ -288,7 +288,8 @@ - } - - /* if not, send a file the easy way */ -- strcpy(buf, resource_path); -+ strncpy(buf, resource_path, sizeof(buf)); -+ buf[sizeof(buf) - 1] = '\0'; - if (strcmp((const char*)in, "/")) { - if (*((const char *)in) != '/') - strcat(buf, "/"); -diff -Nur a/shell/android/jni/src/Android.cpp b/shell/android/jni/src/Android.cpp ---- a/shell/android/jni/src/Android.cpp 2016-05-18 07:26:32.144811409 -0300 -+++ b/shell/android/jni/src/Android.cpp 2016-05-18 08:20:01.230329866 -0300 -@@ -206,7 +206,8 @@ - - if(Args[2]) - { -- strcpy(Args[2],"config:image="); -+ strncpy(Args[2],"config:image=",sizeof(Args[2])); -+ Args[2][sizeof(Args[2]) - 1] = '\0'; - strcat(Args[2],P); - } - -diff -Nur a/shell/linux-deps/include/X11/Xos_r.h b/shell/linux-deps/include/X11/Xos_r.h ---- a/shell/linux-deps/include/X11/Xos_r.h 2016-05-18 07:26:32.328148215 -0300 -+++ b/shell/linux-deps/include/X11/Xos_r.h 2016-05-18 09:04:54.728728985 -0300 -@@ -255,27 +255,33 @@ - - (p).pws.pw_name = (p).pwbuf; - (p).len = strlen((p).pwp->pw_name); -- strcpy((p).pws.pw_name, (p).pwp->pw_name); -+ strncpy((p).pws.pw_name, (p).pwp->pw_name, sizeof((p).pws.pw_name)); -+ (p).pws.pw_name[sizeof((p).pws.pw_name) - 1] = '\0'; - - (p).pws.pw_passwd = (p).pws.pw_name + (p).len + 1; - (p).len = strlen((p).pwp->pw_passwd); -- strcpy((p).pws.pw_passwd,(p).pwp->pw_passwd); -+ strncpy((p).pws.pw_passwd,(p).pwp->pw_passwd, sizeof((p).pws.pw_passwd)); -+ (p).pws.pw_passwd[sizeof((p).pws.pw_passwd) - 1] = '\0'; - - (p).pws.pw_class = (p).pws.pw_passwd + (p).len + 1; - (p).len = strlen((p).pwp->pw_class); -- strcpy((p).pws.pw_class, (p).pwp->pw_class); -+ strncpy((p).pws.pw_class, (p).pwp->pw_class, sizeof((p).pws.pw_class)); -+ (p).pws.pw_class[sizeof((p).pws.pw_class) - 1] = '\0'; - - (p).pws.pw_gecos = (p).pws.pw_class + (p).len + 1; - (p).len = strlen((p).pwp->pw_gecos); -- strcpy((p).pws.pw_gecos, (p).pwp->pw_gecos); -+ strncpy((p).pws.pw_gecos, (p).pwp->pw_gecos, sizeof((p).pws.pw_gecos)); -+ (p).pws.pw_gecos[sizeof((p).pws.pw_gecos) - 1] = '\0'; - - (p).pws.pw_dir = (p).pws.pw_gecos + (p).len + 1; - (p).len = strlen((p).pwp->pw_dir); -- strcpy((p).pws.pw_dir, (p).pwp->pw_dir); -+ strncpy((p).pws.pw_dir, (p).pwp->pw_dir, sizeof((p).pws.pw_dir)); -+ (p).pws.pw_dir[sizeof((p).pws.pw_dir) - 1] = '\0'; - - (p).pws.pw_shell = (p).pws.pw_dir + (p).len + 1; - (p).len = strlen((p).pwp->pw_shell); -- strcpy((p).pws.pw_shell, (p).pwp->pw_shell); -+ strncpy((p).pws.pw_shell, (p).pwp->pw_shell, sizeof((p).pws.pw_shell)); -+ (p).pws.pw_shell[sizeof((p).pws.pw_shell) - 1] = '\0'; - - (p).pwp = &(p).pws; - } -@@ -285,25 +291,32 @@ - (memcpy(&(p).pws, (p).pwp, sizeof(struct passwd)), \ - ((p).pws.pw_name = (p).pwbuf), \ - ((p).len = strlen((p).pwp->pw_name)), \ -- strcpy((p).pws.pw_name, (p).pwp->pw_name), \ -+ strncpy((p).pws.pw_name, (p).pwp->pw_name, sizeof((p).pws.pw_name)), \ -+ (p).pws.pw_name[sizeof((p).pws.pw_name) - 1] = '\0', \ - ((p).pws.pw_passwd = (p).pws.pw_name + (p).len + 1), \ - ((p).len = strlen((p).pwp->pw_passwd)), \ -- strcpy((p).pws.pw_passwd,(p).pwp->pw_passwd), \ -+ strncpy((p).pws.pw_passwd,(p).pwp->pw_passwd, sizeof((p).pws.pw_passwd)), \ -+ (p).pws.pw_passwd[sizeof((p).pws.pw_passwd) - 1] = '\0', \ - ((p).pws.pw_age = (p).pws.pw_passwd + (p).len + 1), \ - ((p).len = strlen((p).pwp->pw_age)), \ -- strcpy((p).pws.pw_age, (p).pwp->pw_age), \ -+ strncpy((p).pws.pw_age, (p).pwp->pw_age, sizeof((p).pws.pw_age)), \ -+ (p).pws.pw_age[sizeof((p).pws.pw_age) - 1] = '\0', \ - ((p).pws.pw_comment = (p).pws.pw_age + (p).len + 1), \ - ((p).len = strlen((p).pwp->pw_comment)), \ -- strcpy((p).pws.pw_comment, (p).pwp->pw_comment), \ -+ strncpy((p).pws.pw_comment, (p).pwp->pw_comment, sizeof((p).pws.pw_comment)), \ -+ (p).pws.pw_comment[sizeof((p).pws.pw_comment) - 1] = '\0', \ - ((p).pws.pw_gecos = (p).pws.pw_comment + (p).len + 1), \ - ((p).len = strlen((p).pwp->pw_gecos)), \ -- strcpy((p).pws.pw_gecos, (p).pwp->pw_gecos), \ -+ strncpy((p).pws.pw_gecos, (p).pwp->pw_gecos, sizeof((p).pws.pw_gecos)), \ -+ (p).pws.pw_gecos[sizeof((p).pws.pw_gecos) - 1] = '\0', \ - ((p).pws.pw_dir = (p).pws.pw_comment + (p).len + 1), \ - ((p).len = strlen((p).pwp->pw_dir)), \ -- strcpy((p).pws.pw_dir, (p).pwp->pw_dir), \ -+ strncpy((p).pws.pw_dir, (p).pwp->pw_dir, sizeof((p).pws.pw_dir)), \ -+ (p).pws.pw_dir[sizeof((p).pws.pw_dir) - 1] = '\0', \ - ((p).pws.pw_shell = (p).pws.pw_dir + (p).len + 1), \ -- ((p).len = strlen((p).pwp->pw_shell)), \ -- strcpy((p).pws.pw_shell, (p).pwp->pw_shell), \ -+ ((p).len = strlen((p).pwp->pw_shell), \ -+ strncpy((p).pws.pw_shell, (p).pwp->pw_shell, sizeof((p).pws.pw_shell)), \ -+ (p).pws.pw_shell[sizeof((p).pws.pw_shell) - 1] = '\0', \ - ((p).pwp = &(p).pws), \ - 0 ) - #endif -@@ -423,15 +436,18 @@ - - # define _Xg_copyHostent(hp) \ - (memcpy(&(hp).hent, (hp).hptr, sizeof(struct hostent)), \ -- strcpy((hp).h_name, (hp).hptr->h_name), \ -+ strncpy((hp).h_name, (hp).hptr->h_name, sizeof((hp).h_name)), \ -+ (hp).h_name[sizeof((hp).h_name) - 1] = '\0', \ - ((hp).hent.h_name = (hp).h_name), \ - ((hp).hptr = &(hp).hent), \ - 0 ) - # define _Xg_copyServent(sp) \ - (memcpy(&(sp).sent, (sp).sptr, sizeof(struct servent)), \ -- strcpy((sp).s_name, (sp).sptr->s_name), \ -+ strncpy((sp).s_name, (sp).sptr->s_name, sizeof((sp).s_name)), \ -+ (sp).s_name[sizeof((sp).s_name) - 1] = '\0', \ - ((sp).sent.s_name = (sp).s_name), \ -- strcpy((sp).s_proto, (sp).sptr->s_proto), \ -+ strncpy((sp).s_proto, (sp).sptr->s_proto, sizeof((sp).s_proto)), \ -+ (sp).s_proto[sizeof((sp).s_proto) - 1] = '\0', \ - ((sp).sent.s_proto = (sp).s_proto), \ - ((sp).sptr = &(sp).sent), \ - 0 ) -@@ -1015,7 +1031,8 @@ - ( memcpy(&(p).grp, (p).pgrp, sizeof(struct group)), \ - ((p).grp.gr_name = (p).buf), \ - ((p).len = strlen((p).pgrp->gr_name)), \ -- strcpy((p).grp.gr_name, (p).pgrp->gr_name), \ -+ strncpy((p).grp.gr_name, (p).pgrp->gr_name, sizeof((p).grp.gr_name)), \ -+ (p).grp.gr_name[sizeof((p).grp.gr_name) - 1] = '\0', \ - ((p).grp.gr_passwd = (p).grp.gr_name + (p).len + 1), \ - ((p).pgrp = &(p).grp), \ - 0 ) -@@ -1023,7 +1040,8 @@ - # define _Xgrp_copyGroup(p) \ - ( memcpy(&(p).grp, (p).pgrp, sizeof(struct group)), \ - ((p).grp.gr_name = (p).buf), \ -- strcpy((p).grp.gr_name, (p).pgrp->gr_name), \ -+ strncpy((p).grp.gr_name, (p).pgrp->gr_name, sizeof((p).grp.gr_name)), \ -+ (p).grp.gr_name[sizeof((p).grp.gr_name) - 1] = '\0', \ - ((p).pgrp = &(p).grp), \ - 0 ) - #endif -diff -Nur a/shell/linux-deps/include/X11/Xtrans/Xtrans.c b/shell/linux-deps/include/X11/Xtrans/Xtrans.c ---- a/shell/linux-deps/include/X11/Xtrans/Xtrans.c 2016-05-18 07:26:32.331481611 -0300 -+++ b/shell/linux-deps/include/X11/Xtrans/Xtrans.c 2016-05-18 08:46:03.538321741 -0300 -@@ -212,7 +212,8 @@ - /* Copy the string so it can be changed */ - - tmpptr = mybuf = (char *) xalloc (strlen (address) + 1); -- strcpy (mybuf, address); -+ strncpy (mybuf, address, sizeof(mybuf)); -+ mybuf[sizeof(mybuf) - 1] = '\0'; - - /* Parse the string to get each component */ - -@@ -371,7 +372,8 @@ - return 0; - } - else -- strcpy (*protocol, _protocol); -+ strncpy (*protocol, _protocol, sizeof(*protocol)); -+ *protocol[sizeof(*protocol) - 1] = '\0'; - - if ((*host = (char *) xalloc (strlen (_host) + 1)) == NULL) - { -@@ -384,7 +386,8 @@ - return 0; - } - else -- strcpy (*host, _host); -+ strncpy (*host, _host, sizeof(*host)); -+ *host[sizeof(*host) - 1] = '\0'; - - if ((*port = (char *) xalloc (strlen (_port) + 1)) == NULL) - { -@@ -398,7 +401,8 @@ - return 0; - } - else -- strcpy (*port, _port); -+ strncpy (*port, _port, sizeof(*port)); -+ *port[sizeof(*port) - 1] = '\0'; - - xfree (tmpptr); - -@@ -545,7 +549,8 @@ - return NULL; - } - -- strcpy (save_port, port); -+ strncpy (save_port, port, sizeof(save_port)); -+ save_port[sizeof(save_port) - 1] = '\0'; - - /* Get a new XtransConnInfo object */ - -@@ -671,7 +676,8 @@ - return 0; - else - { -- strcpy (*port, ciptr->port); -+ strncpy (*port, ciptr->port, sizeof(*port)); -+ *port[sizeof(*port) - 1] = '\0'; - return 1; - } - } -diff -Nur a/shell/linux-deps/include/X11/Xtrans/Xtranslcl.c b/shell/linux-deps/include/X11/Xtrans/Xtranslcl.c ---- a/shell/linux-deps/include/X11/Xtrans/Xtranslcl.c 2016-05-18 07:26:32.334815008 -0300 -+++ b/shell/linux-deps/include/X11/Xtrans/Xtranslcl.c 2016-05-18 08:37:44.809264973 -0300 -@@ -165,7 +165,8 @@ - xfree((char *) sunaddr); - return 0; - } -- strcpy (sunaddr->sun_path, sun_path); -+ strncpy (sunaddr->sun_path, sun_path, sizeof(sunaddr->sun_path)); -+ sunaddr->sun_path[sizeof(sunaddr->sun_path) - 1] = '\0'; - #if defined(BSD44SOCKETS) - sunaddr->sun_len = strlen (sunaddr->sun_path); - #endif -@@ -193,7 +194,8 @@ - xfree((char *) p_sunaddr); - return 0; - } -- strcpy (p_sunaddr->sun_path, peer_sun_path); -+ strncpy (p_sunaddr->sun_path, peer_sun_path, sizeof(p_sunaddr->sun_path)); -+ p_sunaddr->sun_path[sizeof(p_sunaddr->sun_path) - 1] = '\0'; - #if defined(BSD44SOCKETS) - p_sunaddr->sun_len = strlen (p_sunaddr->sun_path); - #endif -@@ -633,7 +635,8 @@ - } - - sunaddr->sun_family=AF_UNIX; -- strcpy(sunaddr->sun_path,buf); -+ strncpy(sunaddr->sun_path,buf,sizeof(sunaddr->sun_path)); -+ sunaddr->sun_path[sizeof(sunaddr->sun_path) - 1] = '\0'; - #if defined(BSD44SOCKETS) - sunaddr->sun_len=strlen(sunaddr->sun_path); - #endif -@@ -1682,7 +1685,8 @@ - { - workingXLOCAL=freeXLOCAL=(char *)xalloc (strlen (protocol) + 1); - if (workingXLOCAL) -- strcpy (workingXLOCAL, protocol); -+ strncpy (workingXLOCAL, protocol, sizeof(workingXLOCAL)); -+ workingXLOCAL[sizeof(workingXLOCAL) - 1] = '\0'; - } - else { - XLOCAL=(char *)getenv("XLOCAL"); -@@ -1690,7 +1694,8 @@ - XLOCAL=DEF_XLOCAL; - workingXLOCAL=freeXLOCAL=(char *)xalloc (strlen (XLOCAL) + 1); - if (workingXLOCAL) -- strcpy (workingXLOCAL, XLOCAL); -+ strncpy (workingXLOCAL, XLOCAL, sizeof(workingXLOCAL)); -+ workingXLOCAL[sizeof(workingXLOCAL) - 1] = '\0'; - } - } - -diff -Nur a/shell/linux-deps/include/X11/Xtrans/Xtranstli.c b/shell/linux-deps/include/X11/Xtrans/Xtranstli.c ---- a/shell/linux-deps/include/X11/Xtrans/Xtranstli.c 2016-05-18 07:26:32.334815008 -0300 -+++ b/shell/linux-deps/include/X11/Xtrans/Xtranstli.c 2016-05-18 08:49:18.868553403 -0300 -@@ -277,7 +277,8 @@ - - #ifdef nuke - if( *port == '/' ) { /* A full pathname */ -- (void) strcpy(sunaddr->sun_path, port); -+ (void) strncpy(sunaddr->sun_path, port, sizeof(sunaddr->sun_path)); -+ (void) sunaddr->sun_path[sizeof(sunaddr->sun_path) - 1] = '\0'; - } else { - (void) sprintf(sunaddr->sun_path,"%s%s", TLINODENAME, port ); - } -@@ -840,7 +841,8 @@ - sunaddr->sun_family=AF_UNIX; - if( port && *port ) { - if( *port == '/' ) { /* A full pathname */ -- (void) strcpy(sunaddr->sun_path, port); -+ (void) strncpy(sunaddr->sun_path, port, sizeof(sunaddr->sun_path)); -+ (void) sunaddr->sun_path[sizeof(sunaddr->sun_path) - 1] = '\0'; - } else { - (void) sprintf(sunaddr->sun_path,"%s%s", TLINODENAME, port ); - } -@@ -1144,7 +1146,8 @@ - if( *port == '/' || - strncmp (port, TLINODENAME, strlen (TLINODENAME)) == 0) { - /* Use the port as is */ -- (void) strcpy(sunaddr->sun_path, port); -+ (void) strncpy(sunaddr->sun_path, port, sizeof(sunaddr->sun_path)); -+ (void) sunaddr->sun_path[sizeof(sunaddr->sun_path) - 1] = '\0'; - } else { - (void) sprintf(sunaddr->sun_path,"%s%s", TLINODENAME, port ); - } -diff -Nur a/shell/linux-deps/include/X11/Xtrans/Xtransutil.c b/shell/linux-deps/include/X11/Xtrans/Xtransutil.c ---- a/shell/linux-deps/include/X11/Xtrans/Xtransutil.c 2016-05-18 07:26:32.338148404 -0300 -+++ b/shell/linux-deps/include/X11/Xtrans/Xtransutil.c 2016-05-18 08:40:26.572188461 -0300 -@@ -203,7 +203,8 @@ - if (!*addrp) - *addrp = (Xtransaddr *) xalloc (len + 1); - if (*addrp) { -- strcpy ((char *) *addrp, hostnamebuf); -+ strncpy ((char *) *addrp, hostnamebuf, sizeof((char *) *addrp)); -+ (char *) *addrp[sizeof((char *) *addrp) - 1] = '\0'; - *addrlenp = len; - } else { - *addrlenp = 0; -@@ -420,7 +421,8 @@ - - hostname = (char *) xalloc ( - strlen (ciptr->transptr->TransName) + strlen (addr) + 2); -- strcpy (hostname, ciptr->transptr->TransName); -+ strncpy (hostname, ciptr->transptr->TransName, sizeof(hostname)); -+ hostname[sizeof(hostname) - 1] = '\0'; - strcat (hostname, "/"); - if (addr) - strcat (hostname, addr); |