about summary refs log tree commit diff
path: root/nis/nis_domain_of_r.c
diff options
context:
space:
mode:
authorUlrich Drepper <drepper@redhat.com>2006-05-24 04:07:18 +0000
committerUlrich Drepper <drepper@redhat.com>2006-05-24 04:07:18 +0000
commit2d571cd1258ab7c20a49e802e31870041dc10a56 (patch)
treeb211f02b858e06c3efe20a7708fe162c9df3d33c /nis/nis_domain_of_r.c
parenta17fa6100dd400cd0c64aab1803c2047c95bfd5b (diff)
downloadglibc-2d571cd1258ab7c20a49e802e31870041dc10a56.tar.gz
glibc-2d571cd1258ab7c20a49e802e31870041dc10a56.tar.xz
glibc-2d571cd1258ab7c20a49e802e31870041dc10a56.zip
* nis/nis_domain_of_r.c (nis_domain_of_r): Add missing buffer
	overflow test.
Diffstat (limited to 'nis/nis_domain_of_r.c')
-rw-r--r--nis/nis_domain_of_r.c9
1 files changed, 7 insertions, 2 deletions
diff --git a/nis/nis_domain_of_r.c b/nis/nis_domain_of_r.c
index 1fedcfe074..e2db146038 100644
--- a/nis/nis_domain_of_r.c
+++ b/nis/nis_domain_of_r.c
@@ -1,4 +1,4 @@
-/* Copyright (c) 1997, 2004 Free Software Foundation, Inc.
+/* Copyright (c) 1997, 2004, 2006 Free Software Foundation, Inc.
    This file is part of the GNU C Library.
    Contributed by Thorsten Kukuk <kukuk@vt.uni-paderborn.de>, 1997.
 
@@ -29,6 +29,7 @@ nis_domain_of_r (const_nis_name name, char *buffer, size_t buflen)
 
   if (buffer == NULL)
     {
+    erange:
       __set_errno (ERANGE);
       return NULL;
     }
@@ -44,7 +45,11 @@ nis_domain_of_r (const_nis_name name, char *buffer, size_t buflen)
   cptr_len = strlen (cptr);
 
   if (cptr_len == 0)
-    return strcpy (buffer, ".");
+    {
+      if (buflen < 2)
+	goto erange;
+      return strcpy (buffer, ".");
+    }
 
   if (__builtin_expect (cptr_len >= buflen, 0))
     {