ioquake
/
gtkradiant
mirror of https://github.com/TTimo/GtkRadiant.git
0
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

q3map2: harden UNIX path sniffer against buffer overflows

This commit is contained in:
Ben Noordhuis 2012-03-18 02:00:09 +01:00
parent 808e1c9f6f
commit 3a959349ac
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
tools/quake3/q3map2/path_init.c
View File

@ -114,7 +114,7 @@ void LokiInitPaths( char *argv0 ){
path = getenv( "PATH" );
/* do some path divining */
strcpy( temp, argv0 );
Q_strncpyz( temp, argv0, sizeof( temp ) );
if ( strrchr( temp, '/' ) ) {
argv0 = strrchr( argv0, '/' ) + 1;
}
@ -136,17 +136,17 @@ void LokiInitPaths( char *argv0 ){
/* found home dir candidate */
if ( *path == '~' ) {
strcpy( temp, home );
Q_strncpyz( temp, home, sizeof( temp ) );
path++;
}
/* concatenate */
if ( last > ( path + 1 ) ) {
strncat( temp, path, ( last - path ) );
strcat( temp, "/" );
Q_strncat( temp, sizeof( temp ), path, ( last - path ) );
Q_strcat( temp, sizeof( temp ), "/" );
}
strcat( temp, "./" );
strcat( temp, argv0 );
Q_strcat( temp, sizeof( temp ), "./" );
Q_strcat( temp, sizeof( temp ), argv0 );
/* verify the path */
if ( access( temp, X_OK ) == 0 ) {