From d816f9205a7a69547bf25b92e4d60187f5381681 Mon Sep 17 00:00:00 2001 From: Hironobu Yamashita Date: Tue, 19 Feb 2019 11:35:57 +0000 Subject: makejvf: more security fix git-svn-id: svn://tug.org/texlive/trunk@50057 c570f23f-e606-0410-a88d-b1316a301751 --- Build/source/texk/makejvf/tfmread.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'Build/source/texk/makejvf/tfmread.c') diff --git a/Build/source/texk/makejvf/tfmread.c b/Build/source/texk/makejvf/tfmread.c index f7ce53b6224..275ecd9164b 100644 --- a/Build/source/texk/makejvf/tfmread.c +++ b/Build/source/texk/makejvf/tfmread.c @@ -96,6 +96,10 @@ int tfmget(char *name) char nbuff[1024]; FILE *fp; + if (strlen(name) >= 1020) { /* - ".tfm" */ + fprintf(stderr,"Too long input file name.\n"); + exit(1); + } strcpy(nbuff,name); fp = fopen(nbuff,"rb"); if (fp == NULL) { @@ -103,7 +107,7 @@ int tfmget(char *name) fp = fopen(nbuff,"rb"); if (fp == NULL) { fprintf(stderr,"%s is not found.\n",name); - exit(0); + exit(1); } } -- cgit v1.2.3