Bug#512365: gmetad: stack based buffer overflow in process_path

[Nico Golde]

Hi,
@@ -381,6 +380,9 @@
          if (!q) q=pathend;

          len = q-p;
+         element = malloc(len + 1);

Are you sure that this can't overflow?

Cheers
Nico

-- 
Nico Golde - http://www.ngolde.de - n...@jabber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.

pgpKZDe4P4ZTu.pgp
Description: PGP signature