cnid_dbd: Set explicit max length of db_params to prevent buffer over…

…flow, GitHub #694
Netatalk · Sep 22, 2024 · a2b07bb · a2b07bb
1 parent c21cbe2
commit a2b07bb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/etc/cnid_dbd/db_param.c b/etc/cnid_dbd/db_param.c
@@ -123,7 +123,7 @@ struct db_param *db_param_read(char *dir)
     }
     parse_err = 0;
 
-    while ((items = fscanf(fp, " %s %s", key, val)) != EOF) {
+    while ((items = fscanf(fp, " %64s %1024s", key, val)) != EOF) {
         if (items != 2) {
             LOG(log_error, logtype_cnid, "error parsing config file");
             parse_err++;