Ian Kent 346236
autofs-5.0.7 - fix parse buffer initialization
Ian Kent 346236
Ian Kent 346236
From: Ian Kent <ikent@redhat.com>
Ian Kent 346236
Ian Kent 346236
When parsing a master map entry, if the mount point path is longer than
Ian Kent 346236
the following map string the lexical analyzer buffer may not have a null
Ian Kent 346236
terminator where it is expected. If the map name string also contains a
Ian Kent 346236
string that is the same as a map type at the end the map name the map
Ian Kent 346236
name is not constructed correctly because of this lack of a string
Ian Kent 346236
terminator in the buffer.
Ian Kent 346236
---
Ian Kent 346236
Ian Kent 346236
 CHANGELOG        |    1 +
Ian Kent 346236
 lib/master_tok.l |    4 +++-
Ian Kent 346236
 2 files changed, 4 insertions(+), 1 deletions(-)
Ian Kent 346236
Ian Kent 346236
Ian Kent 346236
diff --git a/CHANGELOG b/CHANGELOG
Ian Kent 346236
index 34c70fa..276d6ba 100644
Ian Kent 346236
--- a/CHANGELOG
Ian Kent 346236
+++ b/CHANGELOG
Ian Kent 346236
@@ -3,6 +3,7 @@
Ian Kent 346236
 - fix nobind sun escaped map entries.
Ian Kent 346236
 - fix use cache entry after free in lookup_prune_one_cache().
Ian Kent 346236
 - fix ipv6 proximity calculation.
Ian Kent 346236
+- fix parse buffer initialization.
Ian Kent 346236
 
Ian Kent 346236
 25/07/2012 autofs-5.0.7
Ian Kent 346236
 =======================
Ian Kent 346236
diff --git a/lib/master_tok.l b/lib/master_tok.l
Ian Kent 346236
index 0d6edb7..30abb15 100644
Ian Kent 346236
--- a/lib/master_tok.l
Ian Kent 346236
+++ b/lib/master_tok.l
Ian Kent 346236
@@ -74,7 +74,8 @@ int my_yyinput(char *, int);
Ian Kent 346236
 #define unput(c) (*(char *) --line = c)
Ian Kent 346236
 #endif
Ian Kent 346236
 
Ian Kent 346236
-char buff[1024];
Ian Kent 346236
+#define BUFF_LEN	1024
Ian Kent 346236
+char buff[BUFF_LEN];
Ian Kent 346236
 char *bptr;
Ian Kent 346236
 char *optr = buff;
Ian Kent 346236
 unsigned int tlen;
Ian Kent 346236
@@ -174,6 +175,7 @@ OPTNTOUT	(-n{OPTWS}|-n{OPTWS}={OPTWS}|--negative-timeout{OPTWS}|--negative-timeo
Ian Kent 346236
 		*bptr = '\0';
Ian Kent 346236
 		strcpy(master_lval.strtype, buff);
Ian Kent 346236
 		bptr = buff;
Ian Kent 346236
+		memset(buff, 0, BUFF_LEN);
Ian Kent 346236
 		return(PATH);
Ian Kent 346236
 	}
Ian Kent 346236