[coreboot] [PATCH] Avoid cross-device renames in build_opt_tbl

Carl-Daniel Hailfinger c-d.hailfinger.devel.2006 at gmx.net
Thu Dec 4 16:42:44 CET 2008


On 04.12.2008 05:06, Peter Stuge wrote:
> Carl-Daniel Hailfinger wrote:
>   
>> +		tmpfilename = malloc(strlen(option) + strlen(TMPFILE_TEMPLATE) + 1);
>>     
> ..
>   
>> +		tmpfilename = malloc(strlen(header) + strlen(TMPFILE_TEMPLATE) + 1);
>>     
>
> Watch out for those exploits.
>   

;-)

Regards,
Carl-Daniel

-- 
http://www.hailfinger.org/





More information about the coreboot mailing list