Blame SOURCES/0001-vdp22-convert-command-parsing-to-null-term.patch

db1822
From cadb2e55d3a751b4eb0e7c5b34ed037af43a164c Mon Sep 17 00:00:00 2001
db1822
From: Aaron Conole <aconole@redhat.com>
db1822
Date: Wed, 25 Aug 2021 10:19:16 -0400
db1822
Subject: [PATCH 1/8] vdp22: convert command parsing to null term
db1822
db1822
There is a theoretical buffer escape here.
db1822
db1822
closes https://github.com/intel/openlldp/issues/74
db1822
Signed-off-by: Aaron Conole <aconole@redhat.com>
db1822
---
db1822
 qbg/vdp22_cmds.c | 2 +-
db1822
 1 file changed, 1 insertion(+), 1 deletion(-)
db1822
db1822
diff --git a/qbg/vdp22_cmds.c b/qbg/vdp22_cmds.c
db1822
index a8025ee..0ded0f1 100644
db1822
--- a/qbg/vdp22_cmds.c
db1822
+++ b/qbg/vdp22_cmds.c
db1822
@@ -577,7 +577,7 @@ static int get_arg_vsi(struct cmd *cmd, char *arg, char *argvalue,
db1822
 	memset(&vsi, 0, sizeof(vsi));
db1822
 	memset(vsi_str, 0, sizeof(vsi_str));
db1822
 	vsi.request = cmd->tlvid;
db1822
-	strncpy(vsi.ifname, cmd->ifname, sizeof(vsi.ifname));
db1822
+	STRNCPY_TERMINATED(vsi.ifname, cmd->ifname, sizeof(vsi.ifname));
db1822
 	good_cmd = cmd_failed;
db1822
 	if ((cmd->ops & op_config) && (cmd->ops & op_arg)) {
db1822
 		memset(&mac, 0, sizeof(mac));
db1822
-- 
db1822
2.31.1
db1822