[Xfce4-commits] [apps/orage] 01/01: 4.11.2.7 Coverity fix 31719 strcpy without length check

noreply at xfce.org noreply at xfce.org
Thu Mar 5 10:11:22 CET 2015


This is an automated email from the git hooks/post-receive script.

juha pushed a commit to branch master
in repository apps/orage.

commit a19482ee7344bc2f83851c6136d6781c657e21c8
Author: Juha Kautto <juha at xfce.org>
Date:   Thu Mar 5 11:10:38 2015 +0200

    4.11.2.7 Coverity fix 31719 strcpy without length check
    
    Added check for length to prevent overrun
---
 configure.in.in |    2 +-
 src/day-view.c  |    3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/configure.in.in b/configure.in.in
index 2e8bff7..29b1bae 100644
--- a/configure.in.in
+++ b/configure.in.in
@@ -9,7 +9,7 @@ dnl Written for Xfce by Juha Kautto <juha at xfce.org>
 dnl
 
 dnl Version information
-m4_define([orage_version], [4.11.2.6-git])
+m4_define([orage_version], [4.11.2.7-git])
 
 m4_define([gtk_minimum_version], [2.14.0])
 m4_define([xfce_minimum_version], [4.8.0])
diff --git a/src/day-view.c b/src/day-view.c
index 5cd2f03..2993ca2 100644
--- a/src/day-view.c
+++ b/src/day-view.c
@@ -703,7 +703,8 @@ static void app_data(day_win *dw)
 
     ical_type = XFICAL_TYPE_EVENT;
     s_date = (char *)gtk_button_get_label(GTK_BUTTON(dw->StartDate_button));
-    strcpy(dw->a_day, orage_i18_date_to_icaldate(s_date));
+    strncpy(dw->a_day, orage_i18_date_to_icaldate(s_date), 8);
+    dw->a_day[8] = '\0';
     dw->days = gtk_spin_button_get_value_as_int(GTK_SPIN_BUTTON(dw->day_spin));
 
     /* first search base orage file */

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the Xfce4-commits mailing list