denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

tnc-ifmap: Null-terminate buffer to make sscanf()-calls safe

Browse Source
This commit is contained in:
Tobias Brunner
2017-05-23 18:29:13 +02:00
parent c001716642
commit a9b698f5be
1 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/tnc_ifmap/tnc_ifmap_soap_msg.c
+3 -2
View File
@@ -80,7 +80,7 @@ METHOD(tnc_ifmap_soap_msg_t, post, bool,
xmlChar *xml_str, *errorCode, *errorString; xmlChar *xml_str, *errorCode, *errorString;
int xml_len, len, written; int xml_len, len, written;
chunk_t xml, http; chunk_t xml, http;
char buf[4096]; char buf[4096] = { 0 };
status_t status; status_t status;
DBG2(DBG_TNC, "sending ifmap %s", request->name); DBG2(DBG_TNC, "sending ifmap %s", request->name);
@@ -131,7 +131,8 @@ METHOD(tnc_ifmap_soap_msg_t, post, bool,
xml = chunk_empty; xml = chunk_empty;
do do
{ {
len = this->tls->read(this->tls, buf, sizeof(buf), TRUE); /* reduce size so the buffer is null-terminated */
len = this->tls->read(this->tls, buf, sizeof(buf)-1, TRUE);
if (len <= 0) if (len <= 0)
{ {
return FALSE; return FALSE;