File pipslite-1.0.0-destbufferoverflow.patch of Package pipslite

Index: src/rscCtl.c
===================================================================
--- src/rscCtl.c.orig	2006-01-24 07:43:18.000000000 +0100
+++ src/rscCtl.c	2008-10-09 01:45:09.000000000 +0200
@@ -190,7 +190,7 @@ get_model(char* printerID, char* prtOptn
 	found=0;
         while(!feof(f))
         {
-                fgets(str,MAX_LINE_LEN+1,f);
+                fgets(str,MAX_LINE_LEN,f);
                 if(parse_line(str,&argc,argv)== LPR_PRINTER_ID) 
                 {
                 	if(strcmp(argv[0],printerID) ==0)
@@ -210,7 +210,7 @@ get_model(char* printerID, char* prtOptn
 /*	Read prtOpt Data	*/
 	while(!feof(f))
         {
-        	fgets(str,MAX_LINE_LEN+1,f);
+        	fgets(str,MAX_LINE_LEN,f);
                 if(parse_line(str,&argc,argv)==LPR_PRTOPT_ENTRY) 
                 {
                 	temp.idSize=atoi(argv[0]);
@@ -633,7 +633,7 @@ get_paper_auto(MODEL_CONFIG_LIST* model,
 	}
         while( !feof(f))
 	{
-        	fgets(str,MAX_LINE_LEN+1,f);
+        	fgets(str,MAX_LINE_LEN,f);
         	if(parse_line(str,&argc,argv)==LPR_PAPERINFO_ENTRY)
         	{
         		for(i=0;i<count;i++)
@@ -757,7 +757,7 @@ get_paper_auto_trim_4(MODEL_CONFIG_LIST*
 	}
         while( !feof(f))
         {
-        	fgets(str,MAX_LINE_LEN+1,f);
+        	fgets(str,MAX_LINE_LEN,f);
                 if(parse_line(str,&argc,argv)==LPR_PAPERINFO_ENTRY)
                 {
                 	for(i=0;i<count;i++)
@@ -982,7 +982,7 @@ update_resource(char* printer_id)
 	found=0;
 	while(!feof(f))
         {
-        	fgets(str,MAX_LINE_LEN+1,f);
+        	fgets(str,MAX_LINE_LEN,f);
         	if(parse_line(str,&argc,argv)== LPR_PRINTER_ID) 
                 {
                  	if(strcmp(argv[0],printer_id) ==0)
@@ -1079,7 +1079,7 @@ get_default_printer_id(char* printer_id)
 	found=0;
 	while(!feof(f))
         {
-        	fgets(str,MAX_LINE_LEN+1,f);
+        	fgets(str,MAX_LINE_LEN,f);
         	if(parse_line(str,&argc,argv)== LPR_PRINTER_ID) 
                 {
 			strcpy(printer_id, argv[0]);