diff options
| author | Nick Hilliard <nick@inex.ie> | 2009-03-17 22:14:25 +0000 |
|---|---|---|
| committer | Paul Jakma <paul@quagga.net> | 2009-07-21 11:34:27 +0100 |
| commit | e7cc3b383e5e9190aa7784554c605a3a661ebe2b (patch) | |
| tree | 3f7b254d2e47805d4a39c43bd0c6f459e512732a /bgpd | |
| parent | 67b9467f6cad5097a3e4c6e49348be4d6c17a5bb (diff) | |
[bgpd] Small buffer overrun in bgp_clear_node_queue_init
* bgp_route.c: (bgp_clear_node_queue_init) fix buffer
overrun.
Diffstat (limited to 'bgpd')
| -rw-r--r-- | bgpd/bgp_route.c | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/bgpd/bgp_route.c b/bgpd/bgp_route.c index 8dafd181..d08cb1e1 100644 --- a/bgpd/bgp_route.c +++ b/bgpd/bgp_route.c @@ -2726,8 +2726,7 @@ bgp_clear_node_complete (struct work_queue *wq) static void bgp_clear_node_queue_init (struct peer *peer) { -#define CLEAR_QUEUE_NAME_LEN 26 /* "clear 2001:123:123:123::1" */ - char wname[CLEAR_QUEUE_NAME_LEN]; + char wname[sizeof("clear xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx"]; snprintf (wname, CLEAR_QUEUE_NAME_LEN, "clear %s", peer->host); #undef CLEAR_QUEUE_NAME_LEN |