[BusyBox 0000742]: unterminated string in libbb/login.c

[bugs at busybox.net]

The following issue has been SUBMITTED. 
====================================================================== 
http://busybox.net/bugs/view.php?id=742 
====================================================================== 
Reported By:                rfelker
Assigned To:                BusyBox
====================================================================== 
Project:                    BusyBox
Issue ID:                   742
Category:                   Security
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     assigned
====================================================================== 
Date Submitted:             02-19-2006 12:54 PST
Last Modified:              02-19-2006 12:54 PST
====================================================================== 
Summary:                    unterminated string in libbb/login.c
Description: 
In print_login_prompt, buf is not terminated if gethostname uses the full
buffer (the extra byte allocated for the terminating null is left
uninitialized).

(SuSv3 does not require NULL termination by gethostname in the case where
the full buffer is used.)

Also, HOST_NAME_MAX (portable, from limits.h) should be used instead of
MAXHOSTNAMELEN (nonportable, from sys/param.h).

====================================================================== 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
02-19-06 12:54  rfelker        New Issue                                    
02-19-06 12:54  rfelker        Status                   new => assigned     
02-19-06 12:54  rfelker        Assigned To               => BusyBox         
======================================================================