[coreboot] [PATCH] Avoid cross-device renames in build_opt_tbl
Carl-Daniel Hailfinger
c-d.hailfinger.devel.2006 at gmx.net
Thu Dec 4 16:42:44 CET 2008
On 04.12.2008 05:06, Peter Stuge wrote:
> Carl-Daniel Hailfinger wrote:
>
>> + tmpfilename = malloc(strlen(option) + strlen(TMPFILE_TEMPLATE) + 1);
>>
> ..
>
>> + tmpfilename = malloc(strlen(header) + strlen(TMPFILE_TEMPLATE) + 1);
>>
>
> Watch out for those exploits.
>
;-)
Regards,
Carl-Daniel
--
http://www.hailfinger.org/
More information about the coreboot
mailing list