From 9e9b42aa070906d26c32822642a61001d780e4ff Mon Sep 17 00:00:00 2001
From: jbj <devnull@localhost>
Date: Mon, 24 Jan 2000 14:34:14 +0000
Subject: [PATCH] Pass size(...)-1 to avoid buffer overflow on links that are
 1024b long.

CVS patchset: 3531
CVS date: 2000/01/24 14:34:14
---
 lib/verify.c       | 7 ++++++-
 python/rpmmodule.c | 2 +-
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/lib/verify.c b/lib/verify.c
index feb84dc..af3180e 100644
--- a/lib/verify.c
+++ b/lib/verify.c
@@ -31,6 +31,7 @@ static void verifyArgCallback(/*@unused@*/poptContext con,
 }
 
 static int noFiles = 0;
+/** */
 struct poptOption rpmVerifyPoptTable[] = {
 	{ NULL, '\0', POPT_ARG_CALLBACK | POPT_CBFLAG_INC_DATA, 
 		verifyArgCallback, 0, NULL, NULL },
@@ -41,6 +42,7 @@ struct poptOption rpmVerifyPoptTable[] = {
 
 /* ======================================================================== */
 /* XXX static */
+/** */
 int rpmVerifyFile(const char * prefix, Header h, int filenum, int * result, 
 		  int omitMask)
 {
@@ -158,7 +160,7 @@ int rpmVerifyFile(const char * prefix, Header h, int filenum, int * result,
     } 
     if (flags & RPMVERIFY_LINKTO) {
 	headerGetEntry(h, RPMTAG_FILELINKTOS, &type, (void **) &linktoList, &count);
-	size = readlink(filespec, linkto, sizeof(linkto));
+	size = readlink(filespec, linkto, sizeof(linkto)-1);
 	if (size == -1)
 	    *result |= (RPMVERIFY_READLINKFAIL|RPMVERIFY_LINKTO);
 	else  {
@@ -238,6 +240,7 @@ int rpmVerifyFile(const char * prefix, Header h, int filenum, int * result,
 }
 
 /* XXX static */
+/** */
 int rpmVerifyScript(const char * root, Header h, FD_t err)
 {
     return runInstScript(root, h, RPMTAG_VERIFYSCRIPT, RPMTAG_VERIFYSCRIPTPROG,
@@ -342,6 +345,7 @@ static int verifyDependencies(/*@only@*/rpmdb db, Header h) {
     return 0;
 }
 
+/** */
 int showVerifyPackage(QVA_t *qva, rpmdb db, Header h)
 {
     int ec, rc;
@@ -361,6 +365,7 @@ int showVerifyPackage(QVA_t *qva, rpmdb db, Header h)
     return ec;
 }
 
+/** */
 int rpmVerify(QVA_t *qva, enum rpmQVSources source, const char *arg)
 {
     rpmdb db = NULL;
diff --git a/python/rpmmodule.c b/python/rpmmodule.c
index 9885132..f8e0569 100644
--- a/python/rpmmodule.c
+++ b/python/rpmmodule.c
@@ -1107,7 +1107,7 @@ static PyObject * hdrVerifyFile(hdrObject * s, PyObject * args) {
 		     &count);
 	}
 
-	i = readlink(s->fileList[fileNumber], buf, sizeof(buf));
+	i = readlink(s->fileList[fileNumber], buf, sizeof(buf)-1);
 	if (i <= 0)
 	    strcpy(buf, "(unknown)");
 	else
-- 
2.7.4