Canna-security.patch

   1 --- canna-3.5b2.orig/server/misc.c
   2 +++ canna-3.5b2/server/misc.c
   3 @@ -649,12 +649,22 @@
   4
   5      if (client->username && client->username[0]) {
   6        if (client->groupname && client->groupname[0]) {
   7 +       if (strlen(DDUSER) + strlen(client->username) +
   8 +           strlen(DDGROUP) + strlen(client->groupname) +
   9 +           strlen(DDPATH) + 4 >= 256) {
  10 +         return(-1);
  11 +       }
  12 +
  13         sprintf(dichome, "%s/%s:%s/%s:%s",
  14                 DDUSER, client->username,
  15                 DDGROUP, client->groupname,
  16                 DDPATH);
  17        }
  18        else {
  19 +        if (strlen(DDUSER) + strlen(client->username) +
  20 +           strlen(DDPATH) + 2 >= 256) {
  21 +         return(-1);
  22 +       }
  23         sprintf(dichome, "%s/%s:%s",
  24                 DDUSER, client->username,
  25                 DDPATH);