File zoo-security_pathsize.patch of Package zoo

Index: misc.c
===================================================================
--- misc.c.orig	1991-07-11 21:07:26.000000000 +0200
+++ misc.c	2009-11-24 19:46:09.525623000 +0100
@@ -135,11 +135,17 @@ if available, else the short filename is
 char *fullpath (direntry)
 struct direntry *direntry;
 {
-	static char result[PATHSIZE];
+	static char result[PATHSIZE+LFNAMESIZE+12]; /* Room for enough space.*/
 	combine (result,
 				direntry->dirlen != 0 ? direntry->dirname : "", 
 				(direntry->namlen != 0) ? direntry->lfname : direntry->fname
 			  );
+
+       if (strlen (result) >= PATHSIZE) {
+               prterror ('f', "Combined dirname and filename too long!\n");
+               *result = '\0';
+       }
+
 	return (result);
 }
 
openSUSE Build Service is sponsored by