methods/rsh.cc: replace strcat with std::string

Instead of using strcat use a C++ std::string to avoid overflowing
this buffer. Thanks to David Garfield

Closes: #76442

diff --git a/methods/rsh.cc b/methods/rsh.cc
index bd46d25159244eeaa813b366f1a72338e2f6c00d..0e949160bba35f7e7e4cf310ea28185f18c42ff9 100644 (file)
--- a/methods/rsh.cc
+++ b/methods/rsh.cc
@@ -218,17 +218,20 @@ bool RSHConn::WriteMsg(std::string &Text,bool Sync,const char *Fmt,...)
    va_list args;
    va_start(args,Fmt);
 
    va_list args;
    va_start(args,Fmt);
 

-   // sprintf the description
-   char S[512];
-   vsnprintf(S,sizeof(S) - 4,Fmt,args);
+   // sprintf into a buffer
+   char Tmp[1024];
+   vsnprintf(Tmp,sizeof(Tmp),Fmt,args);

    va_end(args);
 
    va_end(args);
 

+   // concat to create the real msg
+   std::string Msg;

    if (Sync == true)
    if (Sync == true)

-      strcat(S," 2> /dev/null || echo\n");
+      Msg = std::string(Tmp) + " 2> /dev/null || echo\n";

    else
    else

-      strcat(S," 2> /dev/null\n");
+      Msg = std::string(Tmp) + " 2> /dev/null\n";

 
    // Send it off
 
    // Send it off

+   const char *S = Msg.c_str();

    unsigned long Len = strlen(S);
    unsigned long Start = 0;
    while (Len != 0)
    unsigned long Len = strlen(S);
    unsigned long Start = 0;
    while (Len != 0)