dtsession: Coverity (memory corruption, moderate)

diff --git a/cde/programs/dtsession/SmGlobals.c b/cde/programs/dtsession/SmGlobals.c
index 40c870885fd4c3e42a35fb81b791cf055fc7fe63..9b31be08970d39f91c60571dd0506256ff6b8b85 100644 (file)
--- a/cde/programs/dtsession/SmGlobals.c
+++ b/cde/programs/dtsession/SmGlobals.c
@@ -1255,7 +1255,7 @@ SetFontSavePath(char *langPtr)
         sessionSaved = SM_HOME_FONT_DIRECTORY;
     }
 
-    sprintf(smGD.fontPath, "%s/%s", smGD.savePath, sessionSaved);
+    snprintf(smGD.fontPath, MAXPATHLEN, "%s/%s", smGD.savePath, sessionSaved);
     status = stat(smGD.fontPath, &buf);
     if(status == -1)
     {
@@ -1272,8 +1272,8 @@ SetFontSavePath(char *langPtr)
     /*
      * Now add the lang subdirectory and see if it exists
      */
-    strcat(smGD.fontPath, "/");
-    strcat(smGD.fontPath, langPtr);
+    strncat(smGD.fontPath, "/", MAXPATHLEN);
+    strncat(smGD.fontPath, langPtr, MAXPATHLEN);
     status = stat(smGD.fontPath, &buf);
     if(status == -1)
     {

diff --git a/cde/programs/dtsession/SmRestore.c b/cde/programs/dtsession/SmRestore.c
index 348db9ba665ccea179d59a4761800e0f58a68b9e..30204800b221f88f3a1f04d1421556443d17b3a6 100644 (file)
--- a/cde/programs/dtsession/SmRestore.c
+++ b/cde/programs/dtsession/SmRestore.c
@@ -1815,7 +1815,7 @@ static int
 RestoreClients( void )
 {
     unsigned char *lineP, *string;
-    char *pch, *dispPtr;
+    char *pch, *dispPtr = NULL;
     char *dispEnv, *dispSav, *dispEnvHelpview, *dispSavHelpview;
     unsigned char *hostPtr=NULL, *cmdPtr=NULL, *hintPtr = NULL;
     unsigned char *remoteDisplay;

diff --git a/cde/programs/dtsession/SrvPalette.c b/cde/programs/dtsession/SrvPalette.c
index aef5157db12e37c0e6cf09bc3e6972623e0b64e7..e6f96e7c57f8009d0149ec3140293a02a29d7175 100644 (file)
--- a/cde/programs/dtsession/SrvPalette.c
+++ b/cde/programs/dtsession/SrvPalette.c
@@ -726,7 +726,7 @@ convert_selection(
         int *format )
 {
   char pixels[50];
-  int i, screen_number;
+  int i, screen_number = 0;
   char *temp;
   char *str_type_return;
   XrmValue value_return;