--- at-3.1.8/atd.c.buflen Fri Jun 9 11:46:54 2000 +++ at-3.1.8/atd.c Fri Jun 9 11:47:29 2000 @@ -196,7 +196,7 @@ */ pid_t pid; int fd_out, fd_in; - char mailbuf[9], jobbuf[9]; + char mailbuf[256], jobbuf[9]; char *mailname = NULL; char *newname; FILE *stream; @@ -299,10 +299,11 @@ * NFS and works with local file systems. It's not clear where * the bug is located. -Joey */ - if (fscanf(stream, "#!/bin/sh\n# atrun uid=%d gid=%d\n# mail %8s %d", + if (fscanf(stream, "#!/bin/sh\n# atrun uid=%d gid=%d\n# mail %255s %d", &nuid, &ngid, mailbuf, &send_mail) != 4) pabort("File %.500s is in wrong format - aborting", filename); + mailbuf[255] = '\0'; if (mailbuf[0] == '-') pabort("illegal mail name %.300s in job %8lu (%.300s)", mailbuf,