summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: 7f8f2f9)
raw | patch | inline | side by side (parent: 7f8f2f9)
author | Sebastian Harl <sh@tokkee.org> | |
Fri, 27 Feb 2015 15:49:01 +0000 (16:49 +0100) | ||
committer | Sebastian Harl <sh@tokkee.org> | |
Fri, 27 Feb 2015 15:49:01 +0000 (16:49 +0100) |
This makes collectd resistant against vulnerable copies of libltdl
(CVE-2009-3736). See <http://bugs.debian.org/559801#15> for further
details.
(CVE-2009-3736). See <http://bugs.debian.org/559801#15> for further
details.
src/plugin.c | patch | blob | history |
diff --git a/src/plugin.c b/src/plugin.c
index ed962a72d82fffd97ff4531777b9565e5ffc22c0..489d0f70c948dd9129dc5156867741412c047b2f 100644 (file)
--- a/src/plugin.c
+++ b/src/plugin.c
const char *dir;
char filename[BUFSIZE] = "";
char typename[BUFSIZE];
- int typename_len;
int ret;
struct stat statbuf;
struct dirent *de;
WARNING ("plugin_load: Filename too long: \"%s.so\"", type);
return (-1);
}
- typename_len = strlen (typename);
if ((dh = opendir (dir)) == NULL)
{
while ((de = readdir (dh)) != NULL)
{
- if (strncasecmp (de->d_name, typename, typename_len))
+ if (strcasecmp (de->d_name, typename))
continue;
status = ssnprintf (filename, sizeof (filename),