Fix buffer-overflow under long path name

mysecureshell · Jan 12, 2018 · d3805e2 · d3805e2
1 parent bae212e
commit d3805e2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/SftpServer/FileSystem.c b/SftpServer/FileSystem.c
@@ -562,7 +562,7 @@ int FSReadLink(const char *file, char *readLink, int sizeofReadLink)
 		FSDestroyPath(path);
 		return SSH2_FX_PERMISSION_DENIED;
 	}
-	len = readlink(path->realPath, readLink, sizeofReadLink);
+	len = readlink(path->realPath, readLink, sizeofReadLink - 1);
 	DEBUG((MYLOG_DEBUG, "[FSReadLink]realPath:'%s' sizeofReadLink:%i => %i", path->realPath, sizeofReadLink, len));
 
 	if (len == -1)