From 093d6da712d5ad5a3f8158bb967cc119c2408aa1 Mon Sep 17 00:00:00 2001 From: Keir Fraser Date: Tue, 23 Oct 2007 14:42:06 +0100 Subject: [PATCH] libxc: check length on string copy (strcpy -> strncpy). Signed-off-by: Christoph Egger --- tools/libxc/xc_dom_boot.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/tools/libxc/xc_dom_boot.c b/tools/libxc/xc_dom_boot.c index e26941f737..30906ee993 100644 --- a/tools/libxc/xc_dom_boot.c +++ b/tools/libxc/xc_dom_boot.c @@ -92,7 +92,9 @@ int xc_dom_compat_check(struct xc_dom_image *dom) char *item, *ptr; int match, found = 0; - strcpy(xen_caps, dom->xen_caps); + strncpy(xen_caps, dom->xen_caps, XEN_CAPABILITIES_INFO_LEN - 1); + xen_caps[XEN_CAPABILITIES_INFO_LEN - 1] = '\0'; + for ( item = strtok_r(xen_caps, " ", &ptr); item != NULL ; item = strtok_r(NULL, " ", &ptr) ) { -- 2.30.2