emo/procps
1
0
Fork 0
Code Issues Pull Requests Packages Releases Activity

0123-vmstat: Replace memcmp() with strncmp().

Browse Source 
Otherwise this may read out-of-bounds (there is no guarantee that 5
bytes are actually available at partition/optarg).

Signed-off-by: Craig Small <csmall@enc.com.au>
This commit is contained in:
Qualys Security Advisory - committed by Craig Small
parent e37e4528d0
commit c7e17f4439
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
vmstat.c
View File

@ -941,7 +941,7 @@ int main(int argc, char *argv[])
case 'p': case 'p':
statMode |= PARTITIONSTAT; statMode |= PARTITIONSTAT;
partition = optarg; partition = optarg;
if (memcmp(partition, "/dev/", 5) == 0) if (strncmp(partition, "/dev/", 5) == 0)
partition += 5; partition += 5;
break; break;
case 'S': case 'S':