Re: [coreboot] [PATCH] Avoid cross-device renames in build_opt_tbl

[Carl-Daniel Hailfinger]

On 04.12.2008 05:06, Peter Stuge wrote:
> Carl-Daniel Hailfinger wrote:
> > tmpfilename = malloc(strlen(option) + strlen(TMPFILE_TEMPLATE) + 1);
>
> ..
> > tmpfilename = malloc(strlen(header) + strlen(TMPFILE_TEMPLATE) + 1);
>
> Watch out for those exploits.

;-)

Regards,
Carl-Daniel