Re: CVS commit: src/lib/libc/net

[David Holland <dholland-sourcechanges%netbsd.org@localhost>]

On Tue, Dec 06, 2016 at 01:41:03PM -0500, Christos Zoulas wrote:
 > Module Name:	src
 > Committed By:	christos
 > Date:		Tue Dec  6 18:41:03 UTC 2016
 > 
 > Modified Files:
 > 	src/lib/libc/net: linkaddr.c
 > 
 > Log Message:
 > Fix buffer copy without checking the size of input:
 > https://www.kb.cert.org/vuls/id/548487

Doesn't this need 

-               if (out >= obuf + sizeof(obuf)) \
+               if (out >= obuf + sizeof(obuf) - 1) \

to avoid having the null terminator off the end?

-- 
David A. Holland
dholland%netbsd.org@localhost