| commit | f56e615d4b0b931a104c3daa0f4ed62a2c6a3e2c | [log] [tgz] |
|---|---|---|
| author | Jan Stancek <jstancek@redhat.com> | Thu Mar 21 16:08:26 2013 +0100 |
| committer | Wanlong Gao <gaowanlong@cn.fujitsu.com> | Fri Mar 22 10:43:09 2013 +0800 |
| tree | c5bd2a92aa2e942ccdc46c2c8aefee51c70ec051 | |
| parent | 575f9932699347440201d5ca6814cbe16cf35ac5 [diff] |
pan: fix potential overrun in tag_report
char *cuts_info[5];
...
while (tok_num < 5 &&
(cuts_info[++tok_num] = strtok(NULL, "\t ")) != NULL) ;
While above can run for tok_num == 4, in which case:
cuts_info[++tok_num] becomes cuts_info[5]
and that is outside of cuts_info array.
Signed-off-by: Jan Stancek <jstancek@redhat.com>
Signed-off-by: Wanlong Gao <gaowanlong@cn.fujitsu.com>