commit 6725bb2a3a425ffff9c2253d60c0f25513c78a93
parent 11642443f520a3f7fe6ecfd7411bf18b3f2081d3
Author: Anselm R. Garbe <arg@suckless.org>
Date:   Sat, 13 Jan 2007 14:09:41 +0100

fixed a potential buffer overflow bug on the stack (thanks to Ghassan Misherg)
Diffstat:

MLICENSE | 2+-


MMakefile | 2+-


Mconfig.mk | 2+-


Mslock.c | 4++--


4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/LICENSE b/LICENSE
@@ -1,6 +1,6 @@
 MIT/X Consortium License
 
-(C)opyright MMVI Anselm R. Garbe <garbeam at gmail dot com>
+(C)opyright MMVI-MMVII Anselm R. Garbe <garbeam at gmail dot com>
 
 Permission is hereby granted, free of charge, to any person obtaining a
 copy of this software and associated documentation files (the "Software"),
diff --git a/Makefile b/Makefile
@@ -1,5 +1,5 @@
 # slock - simple screen locker
-#   (C)opyright MMVI Anselm R. Garbe
+#   (C)opyright MMVI-MMVII Anselm R. Garbe
 
 include config.mk
 
diff --git a/config.mk b/config.mk
@@ -1,5 +1,5 @@
 # slock version
-VERSION = 0.3
+VERSION = 0.4
 
 # Customize below to fit your system
 
diff --git a/slock.c b/slock.c
@@ -1,4 +1,4 @@
-/* (C)opyright MMIV-MMV Anselm R. Garbe <garbeam at gmail dot com>
+/* (C)opyright MMVI-MMVII Anselm R. Garbe <garbeam at gmail dot com>
  * See LICENSE file for license details.
  */
 #define _XOPEN_SOURCE 500
@@ -122,7 +122,7 @@ main(int argc, char **argv) {
 					--len;
 				break;
 			default:
-				if(num && !iscntrl((int) buf[0])) {
+				if(num && !iscntrl((int) buf[0]) && (len + num < sizeof passwd)) { 
 					memcpy(passwd + len, buf, num);
 					len += num;
 				}