Changes in trunk/src/sh_entropy.c [1:30]

File:

• trunk/src/sh_entropy.c (modified) (5 diffs)

trunk/src/sh_entropy.c

@@ -170 +170 @@
         memset( &addr, 0, sizeof(addr) );
         addr.sun_family = AF_UNIX;
-        strcpy( addr.sun_path, name );              /* known to fit  */
+        sl_strlcpy( addr.sun_path, name, sizeof(addr.sun_path) );
         addr_len = offsetof( struct sockaddr_un, sun_path )
                    + strlen( addr.sun_path );
@@ -478 +478 @@
 static
 char   * com_path[] = {
+  N_("/usr/bin/xpg4/"),
   N_("/usr/ucb/"),
   N_("/bin/"),
@@ -570 +571 @@
   char * arg[4];
   char * envp[2];
+  size_t len;
 
   SL_ENTER(_("sh_popen"));
@@ -580 +582 @@
   if (sh.timezone != NULL)
     {
-      envp[0] = malloc (sl_strlen(sh.timezone) + 4);     /* free() ok     */
+      len = sl_strlen(sh.timezone) + 4;
+      envp[0] = malloc (len);     /* free() ok     */
       if (envp[0] != NULL)
-        sprintf (envp[0], "TZ=%s", sh.timezone);         /* known to fit  */
+        sl_snprintf (envp[0], len, "TZ=%s", sh.timezone);
       else
         envp[0] = NULL;
@@ -778 +781 @@
         sl_strlcat(combuf, _(source[i].command), 80);
 
+        /* flawfinder: ignore */
         if ( access (combuf, X_OK) == 0) 
           {