[Ayttm-commits] CVS: ayttm/modules/msn2 msn.C,1.13,1.14

[Colin Leroy <address@hidden>]

Update of /cvsroot/ayttm/ayttm/modules/msn2
In directory subversions:/tmp/cvs-serv5813/modules/msn2

Modified Files:
        msn.C 
Log Message:
prevent buffer overflow


Index: msn.C
===================================================================
RCS file: /cvsroot/ayttm/ayttm/modules/msn2/msn.C,v
retrieving revision 1.13
retrieving revision 1.14
diff -u -r1.13 -r1.14
--- msn.C       6 Jan 2003 19:00:53 -0000       1.13
+++ msn.C       7 Jan 2003 08:52:54 -0000       1.14
@@ -1133,6 +1133,12 @@
   char dialog_message[1025];
   char *uname;
   eb_debug(DBG_MOD,"entering authorize_user\n");
+  /* that's not the right fix */
+  if (strlen(friendlyname) > 254 || strlen (username) > 254) {
+         eb_debug(DBG_MOD, "refusing contact %s because its name is too 
long\n", username);
+         msn_add_to_list(mainconn, "BL", username);
+         return 0;
+  }
   if(!is_waiting_auth(username)) {
          eb_debug(DBG_MOD, "** %s (%s) has added you to their list.\n", 
friendlyname, username);
          sprintf(dialog_message, _("The MSN user %s (%s) would like to add you 
to their contact list.\nDo you want to allow them to see when you are 
online?"), friendlyname, username);