Fix a buffer overflow found by Gerardo Puga <gpuga@gioia.ing.unlp.edu.ar>

 -Erik

diff --git a/shell/lash.c b/shell/lash.c
index 53377d4ed4531960b63f39a600f3edbf5c84fed6..16401225edf0ea4ac09ed52babb007ab44415f06 100644 (file)
--- a/shell/lash.c
+++ b/shell/lash.c
@@ -416,7 +416,7 @@ static int builtin_read(struct child_prog *child)
 
        if (child->argv[1]) {
                /* argument (VAR) given: put "VAR=" into buffer */
-               strcpy(string, child->argv[1]);
+               safe_strncpy(string, child->argv[1], MAX_READ-1);
                len = strlen(string);
                string[len++] = '=';
                string[len]   = '\0';