X-Git-Url: https://git.librecmc.org/?a=blobdiff_plain;f=cde%2Fprograms%2Fdtlogin%2Fpolicy.c;h=1b61b0d75bf1f3c333ee33925d0fd4d3d52bb3c6;hb=ee4a0a37ea2352311e30f1c63df1d1b471c30e8d;hp=b785494806c29f812003540bbd35997088d0b3d7;hpb=bc842043d246b68d2ec29cc6a44634048fad3bf8;p=oweals%2Fcde.git

diff --git a/cde/programs/dtlogin/policy.c b/cde/programs/dtlogin/policy.c
index b7854948..1b61b0d7 100644
--- a/cde/programs/dtlogin/policy.c
+++ b/cde/programs/dtlogin/policy.c
@@ -16,7 +16,7 @@
  * details.
  *
  * You should have received a copy of the GNU Lesser General Public
- * License along with these librararies and programs; if not, write
+ * License along with these libraries and programs; if not, write
  * to the Free Software Foundation, Inc., 51 Franklin Street, Fifth
  * Floor, Boston, MA 02110-1301 USA
  */
@@ -164,14 +164,16 @@ Willing(
 #endif
     ret = AcceptableDisplayAddress (addr, connectionType, type);
     if (!ret)
-	sprintf (statusBuf, "Display not authorized to connect");
+	snprintf (statusBuf, sizeof(statusBuf), "Display not authorized to connect");
     else
-	sprintf (statusBuf, "%s", WillingMsg());
+	snprintf (statusBuf, sizeof(statusBuf), "%s", WillingMsg());
 #if 0
-    	sprintf (statusBuf, "host %s", localHostname());
+    	snprintf (statusBuf, sizeof(statusBuf), "host %s", localHostname());
 #endif
+    /* enforce termination */
+    statusBuf[255] = '\0';
 
-    status->length = strlen (statusBuf);
+    status->length = strlen(statusBuf);
     status->data = (CARD8Ptr) malloc (status->length);
     if (!status->data)
 	status->length = 0;