auth_pts: make sure socket fname will fit in buffer

Fixes #1434
cyrusimap · Jun 28, 2017 · a5f3762 · a5f3762
1 parent 129d3ae
commit a5f3762
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/lib/auth_pts.c b/lib/auth_pts.c
@@ -430,6 +430,13 @@ static int ptload(const char *identifier, struct auth_state **state)
 	fname = tofree;
     }
 
+    if (strlen(fname) >= sizeof(srvaddr.sun_path)) {
+	syslog(LOG_ERR, "ptload(): socket filename %s too long for " SIZE_T_FMT "-byte buffer",
+			fname, sizeof(srvaddr.sun_path));
+	rc = -1;
+	goto done;
+    }
+
     memset((char *)&srvaddr, 0, sizeof(srvaddr));
     srvaddr.sun_family = AF_UNIX;
     strcpy(srvaddr.sun_path, fname);