Tcl Source Code

Artifact 4549284c197b37652ac18381a4c971f809a8a420:

Attachment "tcl-8.5.8-fortify.patch" to ticket [3048354fff] added by dirtyepic 2010-08-19 12:13:42.

---

Fix buffer overflow with GCC 4.5 -D_FORTIFY_SOURCE=2.
https://bugs.gentoo.org/317727

--- a/generic/tclTrace.c
+++ b/generic/tclTrace.c
@@ -909,7 +909,7 @@ TraceVariableObjCmd(
 	    }
 	    ctvarPtr->traceCmdInfo.length = length;
 	    flags |= TCL_TRACE_UNSETS | TCL_TRACE_RESULT_OBJECT;
-	    strcpy(ctvarPtr->traceCmdInfo.command, command);
+	    memcpy(ctvarPtr->traceCmdInfo.command, command, length + 1);
 	    ctvarPtr->traceInfo.traceProc = TraceVarProc;
 	    ctvarPtr->traceInfo.clientData = (ClientData)
 		    &ctvarPtr->traceCmdInfo;