266ea5b
From 35e96e07c956a501cb8a12f5b873db173bb09179 Mon Sep 17 00:00:00 2001
266ea5b
From: Ming-Hung Tsai <mtsai@redhat.com>
266ea5b
Date: Wed, 2 Jun 2021 11:39:01 +0800
266ea5b
Subject: [PATCH 06/10] [thin_metadata_size] Fix potential string overflow
266ea5b
266ea5b
---
266ea5b
 thin-provisioning/thin_metadata_size.cc | 10 +++++++---
266ea5b
 1 file changed, 7 insertions(+), 3 deletions(-)
266ea5b
266ea5b
diff --git a/thin-provisioning/thin_metadata_size.cc b/thin-provisioning/thin_metadata_size.cc
266ea5b
index b6a5718..f14696c 100644
266ea5b
--- a/thin-provisioning/thin_metadata_size.cc
266ea5b
+++ b/thin-provisioning/thin_metadata_size.cc
266ea5b
@@ -192,9 +192,13 @@ static void printf_aligned(struct global *g, char const *a, char const *b, char
266ea5b
 {
266ea5b
 	char buf[80];
266ea5b
 
266ea5b
-	strcpy(buf, b);
266ea5b
-	if (units)
266ea5b
-		strcat(buf, mandatory ? "{" :"["), strcat(buf, g->unit.chars), strcat(buf, mandatory ? "}" : "]");
266ea5b
+	if (units) {
266ea5b
+		char left_bracket = mandatory ? '{' : '[';
266ea5b
+		char right_bracket = mandatory ? '}' : ']';
266ea5b
+		snprintf(buf, 80, "%s%c%s%c", b, left_bracket, g->unit.chars, right_bracket);
266ea5b
+	} else {
266ea5b
+		snprintf(buf, 80, "%s", b);
266ea5b
+	}
266ea5b
 
266ea5b
 	printf("\t%-4s%-44s%s\n", a, buf, c);
266ea5b
 }
266ea5b
-- 
266ea5b
1.8.3.1
266ea5b