Fix read past buffer in lib/nfmalloc.c.

diff --git a/ChangeLog b/ChangeLog
index 453da1b43ef30d6336b4e24ddfb5b252373f097a..90d39f0de9285d2b9d59b78c210fa7a5f2453aeb 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+Thu Aug 22 23:25:23 CDT 2002 Adam Heath <doogie@debian.org>
+
+  * lib/nfmalloc.c: Fix read past buffer in lib/nfmalloc.c.
+
 Thu Aug 22 23:16:02 CDT 2002 Adam Heath <doogie@debian.org>
 
   * utils/md5sum.c: Handle directories better in md5sum.

diff --git a/debian/changelog b/debian/changelog
index ff498c62436f18d52b4685c80aa083622dc40568..f295e5a55a919e5cc1036e599940e72358088b7e 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -4,6 +4,7 @@ dpkg (1.10.5) unstable; urgency=low
     Closes: #154503.
   * Fix extraction of md5sum in dpkg-scanpackages.  Closes: #153769.
   * Handle directories better in md5sum.  Closes: #157453.
+  * Fix read past buffer in lib/nfmalloc.c.  Closes: #157304.
 
  -- Adam Heath <doogie@debian.org>  UNRELEASED
 

diff --git a/lib/nfmalloc.c b/lib/nfmalloc.c
index 9bb4b3f1417a213c9d0341743b2eb996a082b5b7..2930b88345eb6e1856c1cfcce85c1fed0f3508a9 100644 (file)
--- a/lib/nfmalloc.c
+++ b/lib/nfmalloc.c
@@ -53,15 +53,12 @@ inline void *nfmalloc(size_t size)
 
 char *nfstrsave(const char *string) {
   OBSTACK_INIT;
-  return obstack_copy (&db_obs, string, strlen(string) + 1);
+  return obstack_copy0 (&db_obs, string, strlen(string));
 }
 
 char *nfstrnsave(const char *string, int l) {
-  char *ret;
   OBSTACK_INIT;
-  ret = obstack_copy (&db_obs, string, l + 1);
-  *(ret + l) = 0;
-  return ret;
+  return obstack_copy0 (&db_obs, string, l);
 }
 
 void nffreeall(void) {