/*
- * $Id: directory.c,v 1.68 2003-04-16 06:55:44 didg Exp $
+ * $Id: directory.c,v 1.69 2003-04-20 06:13:40 didg Exp $
*
* Copyright (c) 1990,1993 Regents of The University of Michigan.
* All Rights Reserved. See COPYRIGHT.
default:
afp_errno = AFPERR_PARAM;
return( NULL );
-
}
*cpath += len + size;
*path = '\0';
p = path;
while ( *data != sep && len > 0 ) {
*p++ = *data++;
+ if (p > &path[ MAXPATHLEN]) {
+ afp_errno = AFPERR_PARAM;
+ return( NULL );
+ }
len--;
}
/*
- * $Id: file.c,v 1.89 2003-04-09 06:06:34 didg Exp $
+ * $Id: file.c,v 1.90 2003-04-20 06:13:41 didg Exp $
*
* Copyright (c) 1990,1993 Regents of The University of Michigan.
* All Rights Reserved. See COPYRIGHT.
memcpy(&len16, ibuf, sizeof(len16));
ibuf += sizeof(len16);
plen = ntohs(len16);
+
if (plen) {
+ if (plen > AFPOBJ_TMPSIZ) {
+ return -1;
+ }
strncpy( newname, ibuf, plen );
newname[ plen ] = '\0';
if (strlen(newname) != plen) {