]>
Commit | Line | Data |
---|---|---|
dd8a24ee JB |
1 | --- canna-3.5b2.orig/server/misc.c |
2 | +++ canna-3.5b2/server/misc.c | |
3 | @@ -649,12 +649,22 @@ | |
4 | ||
5 | if (client->username && client->username[0]) { | |
6 | if (client->groupname && client->groupname[0]) { | |
7 | + if (strlen(DDUSER) + strlen(client->username) + | |
8 | + strlen(DDGROUP) + strlen(client->groupname) + | |
9 | + strlen(DDPATH) + 4 >= 256) { | |
10 | + return(-1); | |
11 | + } | |
12 | + | |
13 | sprintf(dichome, "%s/%s:%s/%s:%s", | |
14 | DDUSER, client->username, | |
15 | DDGROUP, client->groupname, | |
16 | DDPATH); | |
17 | } | |
18 | else { | |
19 | + if (strlen(DDUSER) + strlen(client->username) + | |
20 | + strlen(DDPATH) + 2 >= 256) { | |
21 | + return(-1); | |
22 | + } | |
23 | sprintf(dichome, "%s/%s:%s", | |
24 | DDUSER, client->username, | |
25 | DDPATH); |