extra/ssmtp/CVE-2008-3962.patch


1
2
3
4
5
6
7
8
9
10
11
12
13
14

--- ssmtp.orig/ssmtp.c
+++ ssmtp/ssmtp.c
@@ -485,6 +485,11 @@ char *from_format(char *str, bool_t over
 				die("from_format() -- snprintf() failed");
 			}
 		}
+		else {
+			if(snprintf(buf, BUF_SZ, "%s", str) == -1) {
+				die("from_format() -- snprintf() failed");
+			}
+		}
 	}
 
 #if 0