coast/rdo
1
0
Fork 0
forked from soccera/rdo
Code Pull requests Activity

fix parsing vulnerability

Browse source
This commit is contained in:
lily 2025-08-13 08:12:38 +10:00
parent 81a2ea4414
commit 4aab1431ed
1 changed files with 10 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

19
rdo.c
View file

@ -33,22 +33,23 @@ char* getpwhash(struct passwd* pw) {
void getconf(FILE* fp, const char* entry, char* result, size_t len_result) { void getconf(FILE* fp, const char* entry, char* result, size_t len_result) {
char* line = NULL; char* line = NULL;
size_t len = 0; size_t len = 0;
size_t entry_len = strlen(entry);
fseek(fp, 0, SEEK_SET); fseek(fp, 0, SEEK_SET);
while (getline(&line, &len, fp) != -1) { while (getline(&line, &len, fp) != -1) {
if (strncmp(entry, line, strlen(entry)) == 0) { if (strncmp(line, entry, entry_len) == 0 &&
strtok(line, "="); (line[entry_len] == '=')) {
char* token = strtok(NULL, "="); char* value = line + entry_len + 1;
if (token) { value[strcspn(value, "\n")] = 0;
strncpy(result, token, len_result); strncpy(result, value, len_result);
result[strcspn(result, "\n")] = 0; result[len_result - 1] = '\0';
free(line); free(line);
return; return;
}
} }
} }
free(line);
errx(1, "Could not get '%s' entry in config", entry); errx(1, "Could not get '%s' entry in config", entry);
} }