[common] fix out-of-bounds read in li_sockaddr_to_string

Change-Id: I8984b6b170a43eb8c0f648c31957c5ae441cf93f
lighttpd · Aug 5, 2015 · 811e13c · 811e13c
1 parent 78ac96c
commit 811e13c
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/common/utils.c b/src/common/utils.c
@@ -629,7 +629,12 @@ GString *li_sockaddr_to_string(liSocketAddress addr, GString *dest, gboolean sho
 		else
 			g_string_truncate(dest, 0);
 		g_string_append_len(dest, CONST_STR_LEN("unix:"));
-		g_string_append(dest, saddr->un.sun_path);
+		{
+			const char* path_start = saddr->un.sun_path;
+			const char* path_end = ((const char*)saddr) + addr.len;
+			size_t path_len = path_end - path_start;
+			g_string_append_len(dest, path_start, strnlen(path_start, path_len));
+		}
 		break;
 #endif
 	default: