Red Hat Bugzilla – Bug 178941
Memory corruption in dos2unix
Last modified: 2007-11-30 17:07:22 EST
fname_len = strlen(dir) + strlen("/d2utmpXXXXXX");
if (!(fname_str = malloc(fname_len)))
sprintf(fname_str, "%s%s", dir, "/d2utmpXXXXXX");
It forgot the trailing '\0' when mallocing memory. I am attaching a patch.
Created attachment 123680 [details]
Changed product to 'Red Hat Enterprise Linux' (from '... Beta').
Marked as duplicate.
*** This bug has been marked as a duplicate of 174016 ***