Dan McGee 86bc36412e curl_gethost() potential bug fixups ...

This is in the realm of "probably not going to happen", but if someone
were to translate "disk" to a string longer than 256 characters, we
would have a smashed/corrupted stack due to our unchecked strcpy() call.
Rework the function to always length-check the value we copy into the
hostname buffer, and do it with memcpy rather than the more cumbersome
and unnecessary snprintf.

Finally, move the magic 256 value into a constant and pass it into the
function which is going to get inlined anyway.

Signed-off-by: Dan McGee <dan@archlinux.org>

2011-10-13 15:16:10 -05:00

..

libalpm

curl_gethost() potential bug fixups

2011-10-13 15:16:10 -05:00