From 15d4bdddcb9b71e0ec6fecc3c37a1b8cae8f51ff Mon Sep 17 00:00:00 2001 From: Hannes Reinecke Date: Fri, 27 Mar 2009 23:50:18 +0100 Subject: [PATCH] Stack overflow in uev_trigger() uev_discard uses sscanf to write a 10 byte string into an array, but I forgot to take the trailing NULL byte into account. --- multipathd/main.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/multipathd/main.c b/multipathd/main.c index b7532f1..8a1a63d 100644 --- a/multipathd/main.c +++ b/multipathd/main.c @@ -607,7 +607,7 @@ static int uev_discard(char * devpath) { char *tmp; - char a[10], b[10]; + char a[11], b[11]; /* * keep only block devices, discard partitions -- 2.7.4