talons

commit a8df3ae48ad5732018934b378abb11a022735c5e
parent 5c904ffa6257f591d0ffde8d90faa592bc384270
Author: Ricardo Mones <ricardo@mones.org>
Date:   Sat, 29 Nov 2014 22:53:33 +0100

Fix possible buffer overflow (CVE 2010-5109)

Patch by Petr Písař <ppisar@redhat.com>
RedHat bug: https://bugzilla.redhat.com/show_bug.cgi?id=831322
Debian bug: https://bugs.debian.org/771360

Diffstat:
M
src/plugins/tnef_parse/ytnef.c
 | 
2
+-

1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/plugins/tnef_parse/ytnef.c b/src/plugins/tnef_parse/ytnef.c
@@ -1352,7 +1352,7 @@ unsigned char *DecompressRTF(variableLength *p, int *size) {
 
     comp_Prebuf.size = strlen(RTF_PREBUF);
     comp_Prebuf.data = calloc(comp_Prebuf.size + 1, 1);
-    strcpy(comp_Prebuf.data, RTF_PREBUF);
+    memcpy(comp_Prebuf.data, RTF_PREBUF, comp_Prebuf.size);
 
     src = p->data;
     in = 0;