Potential buffer overflow in restore.

diff --git a/CHANGES b/CHANGES
index 669203611fdba9f0b0871a1577c9141d2edff507..9eef114b4bfadf9445025077e23e7e040584aaf8 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,4 +1,11 @@
-$Id: CHANGES,v 1.62 2000/06/01 20:49:32 stelian Exp $
+$Id: CHANGES,v 1.63 2000/06/03 22:24:17 stelian Exp $
+
+Changes between versions 0.4b17 and 0.4b18 (released ??????????????)
+====================================================================
+
+1.     Fixed a potential buffer overflow in restore. Thanks
+       to Stan Bubrouski <satan@fastdial.net> for reporting 
+       the bug.
 
 Changes between versions 0.4b16 and 0.4b17 (released June 1st, 2000)
 ====================================================================

diff --git a/restore/tape.c b/restore/tape.c
index f59fc02b4770e7846e66cc449c7a3f9582cb59af..c5d9a661adccdf0fdadb72b2ec31a6446e58c689 100644 (file)
--- a/restore/tape.c
+++ b/restore/tape.c
@@ -45,7 +45,7 @@
 
 #ifndef lint
 static const char rcsid[] =
-       "$Id: tape.c,v 1.16 2000/06/01 18:30:08 stelian Exp $";
+       "$Id: tape.c,v 1.17 2000/06/03 22:24:18 stelian Exp $";
 #endif /* not lint */
 
 #include <sys/param.h>
@@ -359,7 +359,7 @@ again:
                do      {
                        fprintf(stderr, "Specify next volume #: ");
                        (void) fflush(stderr);
-                       (void) fgets(buf, BUFSIZ, terminal);
+                       (void) fgets(buf, TP_BSIZE, terminal);
                } while (!feof(terminal) && buf[0] == '\n');
                if (feof(terminal))
                        exit(1);
@@ -384,7 +384,7 @@ again:
                fprintf(stderr, "Enter ``none'' if there are no more tapes\n");
                fprintf(stderr, "otherwise enter tape name (default: %s) ", magtape);
                (void) fflush(stderr);
-               (void) fgets(buf, BUFSIZ, terminal);
+               (void) fgets(buf, TP_BSIZE, terminal);
                if (feof(terminal))
                        exit(1);
                if (!strcmp(buf, "none\n")) {