summaryrefslogtreecommitdiff
path: root/pcr/reicast-git/no-buffer-overflows.patch
diff options
context:
space:
mode:
Diffstat (limited to 'pcr/reicast-git/no-buffer-overflows.patch')
-rw-r--r--pcr/reicast-git/no-buffer-overflows.patch587
1 files changed, 587 insertions, 0 deletions
diff --git a/pcr/reicast-git/no-buffer-overflows.patch b/pcr/reicast-git/no-buffer-overflows.patch
new file mode 100644
index 000000000..401013231
--- /dev/null
+++ b/pcr/reicast-git/no-buffer-overflows.patch
@@ -0,0 +1,587 @@
+diff -Nur a/core/cfg/cfg.cpp b/core/cfg/cfg.cpp
+--- a/core/cfg/cfg.cpp 2016-05-18 07:26:31.884806485 -0300
++++ b/core/cfg/cfg.cpp 2016-05-18 08:14:04.874168496 -0300
+@@ -128,7 +128,8 @@
+ void cfgLoadStr(const wchar * Section, const wchar * Key, wchar * Return,const wchar* Default)
+ {
+ string value = cfgdb.get(Section, Key, Default);
+- strcpy(Return, value.c_str());
++ strncpy(Return, value.c_str(), sizeof(Return));
++ Return[sizeof(Return) - 1] = '\0';
+ }
+
+ string cfgLoadStr(const wchar * Section, const wchar * Key, const wchar* Default)
+diff -Nur a/core/cfg/ini.cpp b/core/cfg/ini.cpp
+--- a/core/cfg/ini.cpp 2016-05-18 07:26:31.884806485 -0300
++++ b/core/cfg/ini.cpp 2016-05-18 08:12:22.452503951 -0300
+@@ -221,7 +221,8 @@
+ if (tl[0] == '[' && tl[strlen(tl)-1] == ']')
+ {
+ tl[strlen(tl)-1] = '\0';
+- strcpy(current_section, tl+1);
++ strncpy(current_section, tl+1, sizeof(current_section));
++ current_section[sizeof(current_section) - 1] = '\0';
+ trim_ws(current_section);
+ }
+ else
+diff -Nur a/core/deps/libwebsocket/client.c b/core/deps/libwebsocket/client.c
+--- a/core/deps/libwebsocket/client.c 2016-05-18 07:26:31.928140639 -0300
++++ b/core/deps/libwebsocket/client.c 2016-05-18 08:29:26.276930099 -0300
+@@ -871,7 +871,8 @@
+ lws_hdr_simple_ptr(wsi, _WSI_TOKEN_CLIENT_HOST));
+ p += sprintf(p,
+ "Upgrade: websocket\x0d\x0a""Connection: Upgrade\x0d\x0a""Sec-WebSocket-Key: ");
+- strcpy(p, key_b64);
++ strncpy(p, key_b64, sizeof(p));
++ p[sizeof(p) - 1] = '\0';
+ p += strlen(key_b64);
+ p += sprintf(p, "\x0d\x0a");
+ if (lws_hdr_simple_ptr(wsi, _WSI_TOKEN_CLIENT_ORIGIN))
+diff -Nur a/core/deps/libwebsocket/context.c b/core/deps/libwebsocket/context.c
+--- a/core/deps/libwebsocket/context.c 2016-05-18 07:26:31.928140639 -0300
++++ b/core/deps/libwebsocket/context.c 2016-05-18 08:23:42.720827986 -0300
+@@ -167,7 +167,8 @@
+
+ context->user_space = info->user;
+
+- strcpy(context->canonical_hostname, "unknown");
++ strncpy(context->canonical_hostname, "unknown", sizeof(context->canonical_hostname));
++ context->canonical_hostname[sizeof(context->canonical_hostname) - 1] = '\0';
+
+ lws_server_get_canonical_hostname(context, info);
+
+diff -Nur a/core/deps/libwebsocket/libwebsockets.c b/core/deps/libwebsocket/libwebsockets.c
+--- a/core/deps/libwebsocket/libwebsockets.c 2016-05-18 07:26:31.928140639 -0300
++++ b/core/deps/libwebsocket/libwebsockets.c 2016-05-18 08:25:22.529251490 -0300
+@@ -526,7 +526,8 @@
+
+ if (u - wsi->latency_start > context->worst_latency) {
+ context->worst_latency = u - wsi->latency_start;
+- strcpy(context->worst_latency_info, buf);
++ strncpy(context->worst_latency_info, buf, sizeof(context->worst_latency_info));
++ context->worst_latency_info[sizeof(context->worst_latency_info) - 1] = '\0';
+ }
+ lwsl_latency("%s", buf);
+ }
+diff -Nur a/core/deps/libwebsocket/parsers.c b/core/deps/libwebsocket/parsers.c
+--- a/core/deps/libwebsocket/parsers.c 2016-05-18 07:26:31.931474036 -0300
++++ b/core/deps/libwebsocket/parsers.c 2016-05-18 08:27:14.004563720 -0300
+@@ -99,8 +99,9 @@
+ return 0;
+
+ do {
+- strcpy(dest,
+- &wsi->u.hdr.ah->data[wsi->u.hdr.ah->frags[n].offset]);
++ strncpy(dest,
++ &wsi->u.hdr.ah->data[wsi->u.hdr.ah->frags[n].offset], sizeof(dest));
++ dest[sizeof(dest) - 1] = '\0';
+ dest += wsi->u.hdr.ah->frags[n].len;
+ n = wsi->u.hdr.ah->frags[n].next_frag_index;
+ } while (n);
+diff -Nur a/core/deps/libwebsocket/server-handshake.c b/core/deps/libwebsocket/server-handshake.c
+--- a/core/deps/libwebsocket/server-handshake.c 2016-05-18 07:26:31.934807432 -0300
++++ b/core/deps/libwebsocket/server-handshake.c 2016-05-18 09:05:43.379609693 -0300
+@@ -21,7 +21,7 @@
+
+ #include "private-libwebsockets.h"
+
+-#define LWS_CPYAPP(ptr, str) { strcpy(ptr, str); ptr += strlen(str); }
++#define LWS_CPYAPP(ptr, str) { strncpy(ptr, str, sizeof(ptr)); ptr[sizeof(ptr) - 1] = '\0'; ptr += strlen(str); }
+ #ifndef LWS_NO_EXTENSIONS
+ LWS_VISIBLE int
+ lws_extension_server_handshake(struct libwebsocket_context *context,
+@@ -212,7 +212,8 @@
+ "Upgrade: WebSocket\x0d\x0a"
+ "Connection: Upgrade\x0d\x0a"
+ "Sec-WebSocket-Accept: ");
+- strcpy(p, (char *)context->service_buffer);
++ strncpy(p, (char *)context->service_buffer, sizeof(p));
++ p[sizeof(p) - 1] = '\0';
+ p += accept_len;
+
+ if (lws_hdr_total_length(wsi, WSI_TOKEN_PROTOCOL)) {
+diff -Nur a/core/deps/libzip/zip_add_dir.c b/core/deps/libzip/zip_add_dir.c
+--- a/core/deps/libzip/zip_add_dir.c 2016-05-18 07:26:31.938140829 -0300
++++ b/core/deps/libzip/zip_add_dir.c 2016-05-18 08:21:20.351686144 -0300
+@@ -60,7 +60,8 @@
+ _zip_error_set(&za->error, ZIP_ER_MEMORY, 0);
+ return -1;
+ }
+- strcpy(s, name);
++ strncpy(s, name, sizeof(s));
++ s[sizeof(s) - 1] = '\0';
+ s[len] = '/';
+ s[len+1] = '\0';
+ }
+diff -Nur a/core/deps/zlib/gzlib.c b/core/deps/zlib/gzlib.c
+--- a/core/deps/zlib/gzlib.c 2016-05-18 07:26:31.958141208 -0300
++++ b/core/deps/zlib/gzlib.c 2016-05-18 08:10:37.647202679 -0300
+@@ -213,7 +213,8 @@
+ #if !defined(NO_snprintf) && !defined(NO_vsnprintf)
+ snprintf(state->path, len + 1, "%s", (const char *)path);
+ #else
+- strcpy(state->path, path);
++ strncpy(state->path, path, sizeof(state->path));
++ state->path[sizeof(state->path) - 1] = '\0';
+ #endif
+
+ /* compute the flags for open() */
+@@ -607,7 +608,8 @@
+ snprintf(state->msg, strlen(state->path) + strlen(msg) + 3,
+ "%s%s%s", state->path, ": ", msg);
+ #else
+- strcpy(state->msg, state->path);
++ strncpy(state->msg, state->path, sizeof(state->msg));
++ state->msg[sizeof(state->msg) - 1] = '\0';
+ strcat(state->msg, ": ");
+ strcat(state->msg, msg);
+ #endif
+diff -Nur a/core/hw/flashrom/flashrom.h b/core/hw/flashrom/flashrom.h
+--- a/core/hw/flashrom/flashrom.h 2016-05-18 07:26:31.978141586 -0300
++++ b/core/hw/flashrom/flashrom.h 2016-05-18 07:40:53.826766511 -0300
+@@ -63,7 +63,8 @@
+ wchar base[512];
+ wchar temp[512];
+ wchar names[512];
+- strcpy(names,names_ro.c_str());
++ strncpy(names,names_ro.c_str(),sizeof(names));
++ names[sizeof(names) - 1] = '\0';
+ sprintf(base,"%s",root.c_str());
+
+ wchar* curr=names;
+diff -Nur a/core/hw/naomi/naomi_cart.cpp b/core/hw/naomi/naomi_cart.cpp
+--- a/core/hw/naomi/naomi_cart.cpp 2016-05-18 07:26:31.988141776 -0300
++++ b/core/hw/naomi/naomi_cart.cpp 2016-05-18 07:38:20.557239856 -0300
+@@ -33,7 +33,8 @@
+ folder_pos++;
+
+ char t[512];
+- strcpy(t, file);
++ strncpy(t, file, sizeof(t));
++ t[sizeof(t) - 1] = '\0';
+ FILE* fl = fopen(t, "r");
+ if (!fl)
+ return false;
+@@ -92,7 +93,8 @@
+ RomCacheMapCount = (u32)files.size();
+ RomCacheMap = new fd_t[files.size()];
+
+- strcpy(t, file);
++ strncpy(t, file, sizeof(t));
++ t[sizeof(t) - 1] = '\0';
+ t[folder_pos] = 0;
+ strcat(t, "ndcn-composed.cache");
+
+@@ -106,7 +108,8 @@
+ verify(RomPtr != 0);
+ verify(RomPtr != (void*)-1);
+
+- strcpy(t, file);
++ strncpy(t, file, sizeof(t));
++ t[sizeof(t) - 1] = '\0';
+
+ //Create File Mapping Objects
+ for (size_t i = 0; i<files.size(); i++)
+diff -Nur a/core/imgread/common.cpp b/core/imgread/common.cpp
+--- a/core/imgread/common.cpp 2016-05-18 07:26:32.018142344 -0300
++++ b/core/imgread/common.cpp 2016-05-18 08:01:47.097240088 -0300
+@@ -179,7 +179,8 @@
+ }
+
+ wchar fn[512];
+- strcpy(fn,settings.imgread.LastImage);
++ strncpy(fn,settings.imgread.LastImage,sizeof(fn));
++ fn[sizeof(fn) - 1] = '\0';
+ #ifdef BUILD_DREAMCAST
+ int gfrv=GetFile(fn,0,fileflags);
+ #else
+@@ -199,7 +200,8 @@
+ return false;
+ }
+
+- strcpy(settings.imgread.LastImage,fn);
++ strncpy(settings.imgread.LastImage,fn,sizeof(settings.imgread.LastImage));
++ settings.imgread.LastImage[sizeof(settings.imgread.LastImage) - 1] = '\0';
+ SaveSettings();
+
+ if (!InitDrive_(fn))
+@@ -233,7 +235,8 @@
+ }
+
+ wchar fn[512];
+- strcpy(fn,settings.imgread.LastImage);
++ strncpy(fn,settings.imgread.LastImage,sizeof(fn));
++ fn[sizeof(fn) - 1] = '\0';
+ #ifdef BUILD_DREAMCAST
+ int gfrv=GetFile(fn,0,fileflags);
+ #else
+@@ -256,7 +259,8 @@
+ return false;
+ }
+
+- strcpy(settings.imgread.LastImage,fn);
++ strncpy(settings.imgread.LastImage,fn,sizeof(settings.imgread.LastImage));
++ settings.imgread.LastImage[sizeof(settings.imgread.LastImage) - 1] = '\0';
+ SaveSettings();
+
+ if (!InitDrive_(fn))
+diff -Nur a/core/imgread/gdi.cpp b/core/imgread/gdi.cpp
+--- a/core/imgread/gdi.cpp 2016-05-18 07:26:32.021475740 -0300
++++ b/core/imgread/gdi.cpp 2016-05-18 08:04:36.580422753 -0300
+@@ -32,7 +32,8 @@
+ printf("\nGDI : %d tracks\n",iso_tc);
+
+ char path[512];
+- strcpy(path,file);
++ strncpy(path,file,sizeof(path));
++ path[sizeof(path) - 1] = '\0';
+ size_t len=strlen(file);
+ while (len>2)
+ {
+@@ -87,7 +88,8 @@
+
+ if (SSIZE!=0)
+ {
+- strcpy(pathptr, track_filename.c_str());
++ strncpy(pathptr, track_filename.c_str(),sizeof(pathptr));
++ pathptr[sizeof(pathptr) - 1] = '\0';
+ t.file = new RawTrackFile(core_fopen(path),OFFSET,t.StartFAD,SSIZE);
+ }
+ disc->tracks.push_back(t);
+diff -Nur a/core/nullDC.cpp b/core/nullDC.cpp
+--- a/core/nullDC.cpp 2016-05-18 07:26:32.041476119 -0300
++++ b/core/nullDC.cpp 2016-05-18 08:06:38.942720450 -0300
+@@ -62,7 +62,8 @@
+ if (GetOpenFileNameA(&ofn))
+ {
+ //already there
+- //strcpy(szFileName,ofn.lpstrFile);
++ //strncpy(szFileName,ofn.lpstrFile,sizeof(szFileName));
++ //szFileName[sizeof(szFileName) - 1] = '\0';
+ }
+ #endif
+ }
+diff -Nur a/core/webui/server.cpp b/core/webui/server.cpp
+--- a/core/webui/server.cpp 2016-05-18 07:26:32.061476498 -0300
++++ b/core/webui/server.cpp 2016-05-18 07:46:18.756291583 -0300
+@@ -288,7 +288,8 @@
+ }
+
+ /* if not, send a file the easy way */
+- strcpy(buf, resource_path);
++ strncpy(buf, resource_path, sizeof(buf));
++ buf[sizeof(buf) - 1] = '\0';
+ if (strcmp((const char*)in, "/")) {
+ if (*((const char *)in) != '/')
+ strcat(buf, "/");
+diff -Nur a/shell/android/jni/src/Android.cpp b/shell/android/jni/src/Android.cpp
+--- a/shell/android/jni/src/Android.cpp 2016-05-18 07:26:32.144811409 -0300
++++ b/shell/android/jni/src/Android.cpp 2016-05-18 08:20:01.230329866 -0300
+@@ -206,7 +206,8 @@
+
+ if(Args[2])
+ {
+- strcpy(Args[2],"config:image=");
++ strncpy(Args[2],"config:image=",sizeof(Args[2]));
++ Args[2][sizeof(Args[2]) - 1] = '\0';
+ strcat(Args[2],P);
+ }
+
+diff -Nur a/shell/linux-deps/include/X11/Xos_r.h b/shell/linux-deps/include/X11/Xos_r.h
+--- a/shell/linux-deps/include/X11/Xos_r.h 2016-05-18 07:26:32.328148215 -0300
++++ b/shell/linux-deps/include/X11/Xos_r.h 2016-05-18 09:04:54.728728985 -0300
+@@ -255,27 +255,33 @@
+
+ (p).pws.pw_name = (p).pwbuf;
+ (p).len = strlen((p).pwp->pw_name);
+- strcpy((p).pws.pw_name, (p).pwp->pw_name);
++ strncpy((p).pws.pw_name, (p).pwp->pw_name, sizeof((p).pws.pw_name));
++ (p).pws.pw_name[sizeof((p).pws.pw_name) - 1] = '\0';
+
+ (p).pws.pw_passwd = (p).pws.pw_name + (p).len + 1;
+ (p).len = strlen((p).pwp->pw_passwd);
+- strcpy((p).pws.pw_passwd,(p).pwp->pw_passwd);
++ strncpy((p).pws.pw_passwd,(p).pwp->pw_passwd, sizeof((p).pws.pw_passwd));
++ (p).pws.pw_passwd[sizeof((p).pws.pw_passwd) - 1] = '\0';
+
+ (p).pws.pw_class = (p).pws.pw_passwd + (p).len + 1;
+ (p).len = strlen((p).pwp->pw_class);
+- strcpy((p).pws.pw_class, (p).pwp->pw_class);
++ strncpy((p).pws.pw_class, (p).pwp->pw_class, sizeof((p).pws.pw_class));
++ (p).pws.pw_class[sizeof((p).pws.pw_class) - 1] = '\0';
+
+ (p).pws.pw_gecos = (p).pws.pw_class + (p).len + 1;
+ (p).len = strlen((p).pwp->pw_gecos);
+- strcpy((p).pws.pw_gecos, (p).pwp->pw_gecos);
++ strncpy((p).pws.pw_gecos, (p).pwp->pw_gecos, sizeof((p).pws.pw_gecos));
++ (p).pws.pw_gecos[sizeof((p).pws.pw_gecos) - 1] = '\0';
+
+ (p).pws.pw_dir = (p).pws.pw_gecos + (p).len + 1;
+ (p).len = strlen((p).pwp->pw_dir);
+- strcpy((p).pws.pw_dir, (p).pwp->pw_dir);
++ strncpy((p).pws.pw_dir, (p).pwp->pw_dir, sizeof((p).pws.pw_dir));
++ (p).pws.pw_dir[sizeof((p).pws.pw_dir) - 1] = '\0';
+
+ (p).pws.pw_shell = (p).pws.pw_dir + (p).len + 1;
+ (p).len = strlen((p).pwp->pw_shell);
+- strcpy((p).pws.pw_shell, (p).pwp->pw_shell);
++ strncpy((p).pws.pw_shell, (p).pwp->pw_shell, sizeof((p).pws.pw_shell));
++ (p).pws.pw_shell[sizeof((p).pws.pw_shell) - 1] = '\0';
+
+ (p).pwp = &(p).pws;
+ }
+@@ -285,25 +291,32 @@
+ (memcpy(&(p).pws, (p).pwp, sizeof(struct passwd)), \
+ ((p).pws.pw_name = (p).pwbuf), \
+ ((p).len = strlen((p).pwp->pw_name)), \
+- strcpy((p).pws.pw_name, (p).pwp->pw_name), \
++ strncpy((p).pws.pw_name, (p).pwp->pw_name, sizeof((p).pws.pw_name)), \
++ (p).pws.pw_name[sizeof((p).pws.pw_name) - 1] = '\0', \
+ ((p).pws.pw_passwd = (p).pws.pw_name + (p).len + 1), \
+ ((p).len = strlen((p).pwp->pw_passwd)), \
+- strcpy((p).pws.pw_passwd,(p).pwp->pw_passwd), \
++ strncpy((p).pws.pw_passwd,(p).pwp->pw_passwd, sizeof((p).pws.pw_passwd)), \
++ (p).pws.pw_passwd[sizeof((p).pws.pw_passwd) - 1] = '\0', \
+ ((p).pws.pw_age = (p).pws.pw_passwd + (p).len + 1), \
+ ((p).len = strlen((p).pwp->pw_age)), \
+- strcpy((p).pws.pw_age, (p).pwp->pw_age), \
++ strncpy((p).pws.pw_age, (p).pwp->pw_age, sizeof((p).pws.pw_age)), \
++ (p).pws.pw_age[sizeof((p).pws.pw_age) - 1] = '\0', \
+ ((p).pws.pw_comment = (p).pws.pw_age + (p).len + 1), \
+ ((p).len = strlen((p).pwp->pw_comment)), \
+- strcpy((p).pws.pw_comment, (p).pwp->pw_comment), \
++ strncpy((p).pws.pw_comment, (p).pwp->pw_comment, sizeof((p).pws.pw_comment)), \
++ (p).pws.pw_comment[sizeof((p).pws.pw_comment) - 1] = '\0', \
+ ((p).pws.pw_gecos = (p).pws.pw_comment + (p).len + 1), \
+ ((p).len = strlen((p).pwp->pw_gecos)), \
+- strcpy((p).pws.pw_gecos, (p).pwp->pw_gecos), \
++ strncpy((p).pws.pw_gecos, (p).pwp->pw_gecos, sizeof((p).pws.pw_gecos)), \
++ (p).pws.pw_gecos[sizeof((p).pws.pw_gecos) - 1] = '\0', \
+ ((p).pws.pw_dir = (p).pws.pw_comment + (p).len + 1), \
+ ((p).len = strlen((p).pwp->pw_dir)), \
+- strcpy((p).pws.pw_dir, (p).pwp->pw_dir), \
++ strncpy((p).pws.pw_dir, (p).pwp->pw_dir, sizeof((p).pws.pw_dir)), \
++ (p).pws.pw_dir[sizeof((p).pws.pw_dir) - 1] = '\0', \
+ ((p).pws.pw_shell = (p).pws.pw_dir + (p).len + 1), \
+- ((p).len = strlen((p).pwp->pw_shell)), \
+- strcpy((p).pws.pw_shell, (p).pwp->pw_shell), \
++ ((p).len = strlen((p).pwp->pw_shell), \
++ strncpy((p).pws.pw_shell, (p).pwp->pw_shell, sizeof((p).pws.pw_shell)), \
++ (p).pws.pw_shell[sizeof((p).pws.pw_shell) - 1] = '\0', \
+ ((p).pwp = &(p).pws), \
+ 0 )
+ #endif
+@@ -423,15 +436,18 @@
+
+ # define _Xg_copyHostent(hp) \
+ (memcpy(&(hp).hent, (hp).hptr, sizeof(struct hostent)), \
+- strcpy((hp).h_name, (hp).hptr->h_name), \
++ strncpy((hp).h_name, (hp).hptr->h_name, sizeof((hp).h_name)), \
++ (hp).h_name[sizeof((hp).h_name) - 1] = '\0', \
+ ((hp).hent.h_name = (hp).h_name), \
+ ((hp).hptr = &(hp).hent), \
+ 0 )
+ # define _Xg_copyServent(sp) \
+ (memcpy(&(sp).sent, (sp).sptr, sizeof(struct servent)), \
+- strcpy((sp).s_name, (sp).sptr->s_name), \
++ strncpy((sp).s_name, (sp).sptr->s_name, sizeof((sp).s_name)), \
++ (sp).s_name[sizeof((sp).s_name) - 1] = '\0', \
+ ((sp).sent.s_name = (sp).s_name), \
+- strcpy((sp).s_proto, (sp).sptr->s_proto), \
++ strncpy((sp).s_proto, (sp).sptr->s_proto, sizeof((sp).s_proto)), \
++ (sp).s_proto[sizeof((sp).s_proto) - 1] = '\0', \
+ ((sp).sent.s_proto = (sp).s_proto), \
+ ((sp).sptr = &(sp).sent), \
+ 0 )
+@@ -1015,7 +1031,8 @@
+ ( memcpy(&(p).grp, (p).pgrp, sizeof(struct group)), \
+ ((p).grp.gr_name = (p).buf), \
+ ((p).len = strlen((p).pgrp->gr_name)), \
+- strcpy((p).grp.gr_name, (p).pgrp->gr_name), \
++ strncpy((p).grp.gr_name, (p).pgrp->gr_name, sizeof((p).grp.gr_name)), \
++ (p).grp.gr_name[sizeof((p).grp.gr_name) - 1] = '\0', \
+ ((p).grp.gr_passwd = (p).grp.gr_name + (p).len + 1), \
+ ((p).pgrp = &(p).grp), \
+ 0 )
+@@ -1023,7 +1040,8 @@
+ # define _Xgrp_copyGroup(p) \
+ ( memcpy(&(p).grp, (p).pgrp, sizeof(struct group)), \
+ ((p).grp.gr_name = (p).buf), \
+- strcpy((p).grp.gr_name, (p).pgrp->gr_name), \
++ strncpy((p).grp.gr_name, (p).pgrp->gr_name, sizeof((p).grp.gr_name)), \
++ (p).grp.gr_name[sizeof((p).grp.gr_name) - 1] = '\0', \
+ ((p).pgrp = &(p).grp), \
+ 0 )
+ #endif
+diff -Nur a/shell/linux-deps/include/X11/Xtrans/Xtrans.c b/shell/linux-deps/include/X11/Xtrans/Xtrans.c
+--- a/shell/linux-deps/include/X11/Xtrans/Xtrans.c 2016-05-18 07:26:32.331481611 -0300
++++ b/shell/linux-deps/include/X11/Xtrans/Xtrans.c 2016-05-18 08:46:03.538321741 -0300
+@@ -212,7 +212,8 @@
+ /* Copy the string so it can be changed */
+
+ tmpptr = mybuf = (char *) xalloc (strlen (address) + 1);
+- strcpy (mybuf, address);
++ strncpy (mybuf, address, sizeof(mybuf));
++ mybuf[sizeof(mybuf) - 1] = '\0';
+
+ /* Parse the string to get each component */
+
+@@ -371,7 +372,8 @@
+ return 0;
+ }
+ else
+- strcpy (*protocol, _protocol);
++ strncpy (*protocol, _protocol, sizeof(*protocol));
++ *protocol[sizeof(*protocol) - 1] = '\0';
+
+ if ((*host = (char *) xalloc (strlen (_host) + 1)) == NULL)
+ {
+@@ -384,7 +386,8 @@
+ return 0;
+ }
+ else
+- strcpy (*host, _host);
++ strncpy (*host, _host, sizeof(*host));
++ *host[sizeof(*host) - 1] = '\0';
+
+ if ((*port = (char *) xalloc (strlen (_port) + 1)) == NULL)
+ {
+@@ -398,7 +401,8 @@
+ return 0;
+ }
+ else
+- strcpy (*port, _port);
++ strncpy (*port, _port, sizeof(*port));
++ *port[sizeof(*port) - 1] = '\0';
+
+ xfree (tmpptr);
+
+@@ -545,7 +549,8 @@
+ return NULL;
+ }
+
+- strcpy (save_port, port);
++ strncpy (save_port, port, sizeof(save_port));
++ save_port[sizeof(save_port) - 1] = '\0';
+
+ /* Get a new XtransConnInfo object */
+
+@@ -671,7 +676,8 @@
+ return 0;
+ else
+ {
+- strcpy (*port, ciptr->port);
++ strncpy (*port, ciptr->port, sizeof(*port));
++ *port[sizeof(*port) - 1] = '\0';
+ return 1;
+ }
+ }
+diff -Nur a/shell/linux-deps/include/X11/Xtrans/Xtranslcl.c b/shell/linux-deps/include/X11/Xtrans/Xtranslcl.c
+--- a/shell/linux-deps/include/X11/Xtrans/Xtranslcl.c 2016-05-18 07:26:32.334815008 -0300
++++ b/shell/linux-deps/include/X11/Xtrans/Xtranslcl.c 2016-05-18 08:37:44.809264973 -0300
+@@ -165,7 +165,8 @@
+ xfree((char *) sunaddr);
+ return 0;
+ }
+- strcpy (sunaddr->sun_path, sun_path);
++ strncpy (sunaddr->sun_path, sun_path, sizeof(sunaddr->sun_path));
++ sunaddr->sun_path[sizeof(sunaddr->sun_path) - 1] = '\0';
+ #if defined(BSD44SOCKETS)
+ sunaddr->sun_len = strlen (sunaddr->sun_path);
+ #endif
+@@ -193,7 +194,8 @@
+ xfree((char *) p_sunaddr);
+ return 0;
+ }
+- strcpy (p_sunaddr->sun_path, peer_sun_path);
++ strncpy (p_sunaddr->sun_path, peer_sun_path, sizeof(p_sunaddr->sun_path));
++ p_sunaddr->sun_path[sizeof(p_sunaddr->sun_path) - 1] = '\0';
+ #if defined(BSD44SOCKETS)
+ p_sunaddr->sun_len = strlen (p_sunaddr->sun_path);
+ #endif
+@@ -633,7 +635,8 @@
+ }
+
+ sunaddr->sun_family=AF_UNIX;
+- strcpy(sunaddr->sun_path,buf);
++ strncpy(sunaddr->sun_path,buf,sizeof(sunaddr->sun_path));
++ sunaddr->sun_path[sizeof(sunaddr->sun_path) - 1] = '\0';
+ #if defined(BSD44SOCKETS)
+ sunaddr->sun_len=strlen(sunaddr->sun_path);
+ #endif
+@@ -1682,7 +1685,8 @@
+ {
+ workingXLOCAL=freeXLOCAL=(char *)xalloc (strlen (protocol) + 1);
+ if (workingXLOCAL)
+- strcpy (workingXLOCAL, protocol);
++ strncpy (workingXLOCAL, protocol, sizeof(workingXLOCAL));
++ workingXLOCAL[sizeof(workingXLOCAL) - 1] = '\0';
+ }
+ else {
+ XLOCAL=(char *)getenv("XLOCAL");
+@@ -1690,7 +1694,8 @@
+ XLOCAL=DEF_XLOCAL;
+ workingXLOCAL=freeXLOCAL=(char *)xalloc (strlen (XLOCAL) + 1);
+ if (workingXLOCAL)
+- strcpy (workingXLOCAL, XLOCAL);
++ strncpy (workingXLOCAL, XLOCAL, sizeof(workingXLOCAL));
++ workingXLOCAL[sizeof(workingXLOCAL) - 1] = '\0';
+ }
+ }
+
+diff -Nur a/shell/linux-deps/include/X11/Xtrans/Xtranstli.c b/shell/linux-deps/include/X11/Xtrans/Xtranstli.c
+--- a/shell/linux-deps/include/X11/Xtrans/Xtranstli.c 2016-05-18 07:26:32.334815008 -0300
++++ b/shell/linux-deps/include/X11/Xtrans/Xtranstli.c 2016-05-18 08:49:18.868553403 -0300
+@@ -277,7 +277,8 @@
+
+ #ifdef nuke
+ if( *port == '/' ) { /* A full pathname */
+- (void) strcpy(sunaddr->sun_path, port);
++ (void) strncpy(sunaddr->sun_path, port, sizeof(sunaddr->sun_path));
++ (void) sunaddr->sun_path[sizeof(sunaddr->sun_path) - 1] = '\0';
+ } else {
+ (void) sprintf(sunaddr->sun_path,"%s%s", TLINODENAME, port );
+ }
+@@ -840,7 +841,8 @@
+ sunaddr->sun_family=AF_UNIX;
+ if( port && *port ) {
+ if( *port == '/' ) { /* A full pathname */
+- (void) strcpy(sunaddr->sun_path, port);
++ (void) strncpy(sunaddr->sun_path, port, sizeof(sunaddr->sun_path));
++ (void) sunaddr->sun_path[sizeof(sunaddr->sun_path) - 1] = '\0';
+ } else {
+ (void) sprintf(sunaddr->sun_path,"%s%s", TLINODENAME, port );
+ }
+@@ -1144,7 +1146,8 @@
+ if( *port == '/' ||
+ strncmp (port, TLINODENAME, strlen (TLINODENAME)) == 0) {
+ /* Use the port as is */
+- (void) strcpy(sunaddr->sun_path, port);
++ (void) strncpy(sunaddr->sun_path, port, sizeof(sunaddr->sun_path));
++ (void) sunaddr->sun_path[sizeof(sunaddr->sun_path) - 1] = '\0';
+ } else {
+ (void) sprintf(sunaddr->sun_path,"%s%s", TLINODENAME, port );
+ }
+diff -Nur a/shell/linux-deps/include/X11/Xtrans/Xtransutil.c b/shell/linux-deps/include/X11/Xtrans/Xtransutil.c
+--- a/shell/linux-deps/include/X11/Xtrans/Xtransutil.c 2016-05-18 07:26:32.338148404 -0300
++++ b/shell/linux-deps/include/X11/Xtrans/Xtransutil.c 2016-05-18 08:40:26.572188461 -0300
+@@ -203,7 +203,8 @@
+ if (!*addrp)
+ *addrp = (Xtransaddr *) xalloc (len + 1);
+ if (*addrp) {
+- strcpy ((char *) *addrp, hostnamebuf);
++ strncpy ((char *) *addrp, hostnamebuf, sizeof((char *) *addrp));
++ (char *) *addrp[sizeof((char *) *addrp) - 1] = '\0';
+ *addrlenp = len;
+ } else {
+ *addrlenp = 0;
+@@ -420,7 +421,8 @@
+
+ hostname = (char *) xalloc (
+ strlen (ciptr->transptr->TransName) + strlen (addr) + 2);
+- strcpy (hostname, ciptr->transptr->TransName);
++ strncpy (hostname, ciptr->transptr->TransName, sizeof(hostname));
++ hostname[sizeof(hostname) - 1] = '\0';
+ strcat (hostname, "/");
+ if (addr)
+ strcat (hostname, addr);
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-06 20:19:50 +0000