From: Keir Fraser <keir.fraser@citrix.com>
Date: Tue, 2 Dec 2008 22:17:22 +0000 (+0000)
Subject: xenpmd: Adjust strncat() length to avoid static buffer overflow.
X-Git-Tag: archive/raspbian/4.8.0-1+rpi1~1^2~14040^2~9
X-Git-Url: https://dgit.raspbian.org/%22http:/www.example.com/cgi/%22https:/%22bookmarks://%22Dat/%22http:/www.example.com/cgi/%22https:/%22bookmarks:/%22Dat?a=commitdiff_plain;h=ff0b9e125476e2897074d9f2ee5901ad313cf434;p=xen.git

xenpmd: Adjust strncat() length to avoid static buffer overflow.
Signed-off-by: Keir Fraser <keir.fraser@citrix.com>
---

diff --git a/tools/xenpmd/xenpmd.c b/tools/xenpmd/xenpmd.c
index 0dcf365619..c98e898316 100644
--- a/tools/xenpmd/xenpmd.c
+++ b/tools/xenpmd/xenpmd.c
@@ -373,7 +373,7 @@ void write_battery_info_to_xenstore(struct battery_info *info)
              (unsigned int)strlen(info->serial_number), info->serial_number,
              (unsigned int)strlen(info->battery_type), info->battery_type,
              (unsigned int)strlen(info->oem_info), info->oem_info);
-    strncat(val+73, string_info, 1024);
+    strncat(val+73, string_info, 1024-73-1);
     xs_write(xs, XBT_NULL, "/pm/bif", 
              val, 73+8+strlen(info->model_number)+strlen(info->serial_number)+
              strlen(info->battery_type)+strlen(info->oem_info)+1);