diff options
author | Peter Vilim <peterlvilim@users.noreply.github.com> | 2015-01-07 21:37:35 -0600 |
---|---|---|
committer | Peter Vilim <peterlvilim@users.noreply.github.com> | 2015-01-07 21:37:35 -0600 |
commit | 0cb548683c906eb7e48ddfccde4b95f671dea5fc (patch) | |
tree | 0dce7c2d92fd90111e4cf0beb0b5d232094b2772 /src/config | |
parent | b298994ce755d4ddc0c7de882c989e58806c212d (diff) | |
download | profani-tty-0cb548683c906eb7e48ddfccde4b95f671dea5fc.tar.gz |
fgets: buffer size
Diffstat (limited to 'src/config')
-rw-r--r-- | src/config/accounts.c | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/src/config/accounts.c b/src/config/accounts.c index 784651ad..2e7092a5 100644 --- a/src/config/accounts.c +++ b/src/config/accounts.c @@ -230,9 +230,12 @@ accounts_get_account(const char * const name) // Evaluate as shell command to retrieve password if (eval_password != NULL) { FILE *stream = popen(eval_password, "r"); - // Limit to 100 bytes to prevent overflows in the case of a poorly chosen command - password = g_malloc(100); - password = fgets(password, 100, stream); + // Limit to READ_BUF_SIZE bytes to prevent overflows in the case of a poorly chosen command + password = g_malloc(READ_BUF_SIZE); + gchar *result = fgets(password, READ_BUF_SIZE, stream); + if (result != NULL) { + password = result; + } } gboolean enabled = g_key_file_get_boolean(accounts, name, "enabled", NULL); |