1
0
mirror of https://git.tartarus.org/simon/putty.git synced 2025-05-27 23:04:48 -05:00
Simon Tatham 721650bcb1 Fix dodgy strcats in access_random_seed().
Looking over this function today, I spotted several questionable uses
of strcat to concatenate "\PUTTY.RND" to the end of a pathname,
without having checked whether the pathname had filled up the static
fixed-size buffer already.

I don't think this is exploitable (because you'd have to be in control
of the local account already to control any of the data sources used
to fill those buffers). But it's horrible anyway, of course. Now all
of those are replaced with sensible dupcats.

(This patch re-indents a lot of the function, to give variables
tighter scopes. So the diff is best viewed with whitespace ignored.)
2019-07-10 20:47:09 +01:00
..
2019-03-18 20:32:55 +00:00
2019-03-18 20:32:55 +00:00
2017-09-13 19:26:28 +01:00
2017-05-07 16:29:01 +01:00
2019-03-18 20:32:55 +00:00
2019-06-19 06:49:24 +01:00