commit 223885b66311bbb47e439557eced066b3324ad8e Author: Hannes Reinecke Date: Tue Mar 10 08:57:18 2009 +0100 Stack overflow in uev_trigger() uev_discard uses sscanf to write a 10 byte string into an array, but I forgot to take the trailing NULL byte into account. References: bnc#476540 Signed-off-by: Hannes Reinecke diff --git a/multipathd/main.c b/multipathd/main.c index 7c995b6..1d8ff5a 100644 --- a/multipathd/main.c +++ b/multipathd/main.c @@ -652,7 +652,7 @@ uxsock_trigger (char * str, char ** reply, int * len, void * trigger_data) static int uev_discard(char * devpath) { - char a[10], b[10], *c; + char a[11], b[11], *c; /* * keep only block devices, discard partitions