Fix buffer overflow vulnerabilities in calculate_path().  Code used
copied strings from environment variables and argv[0] into
fixed-length buffers without checking their length.

Reported by Stan Bubrouski; advice on fix from John Viega.
1 file changed