From e0212b8c85748180bcb02d3d073c5668f8c10679 Mon Sep 17 00:00:00 2001 From: Andy Green Date: Sun, 28 Aug 2016 09:12:39 +0800 Subject: [PATCH] coverity 169275 - lwsgt check string bounds --- plugins/generic-sessions/handlers.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/plugins/generic-sessions/handlers.c b/plugins/generic-sessions/handlers.c index bd00c2b..108983c 100644 --- a/plugins/generic-sessions/handlers.c +++ b/plugins/generic-sessions/handlers.c @@ -304,7 +304,8 @@ lwsgs_handler_change_password(struct per_vhost_data__gs *vhd, struct lws *wsi, return 1; } - strcpy(u.username, lws_spa_get_string(pss->spa, FGS_USERNAME)); + strncpy(u.username, lws_spa_get_string(pss->spa, FGS_USERNAME), sizeof(u.username) - 1); + u.username[sizeof(u.username) - 1] = '\0'; } /* does he want to delete his account? */ -- 2.7.4