http://ftp.x.org/contrib/applications/xscreensaver-3.18.tar.gz

[xscreensaver] / hacks / screenhack.c

diff --git a/hacks/screenhack.c b/hacks/screenhack.c
index 8a882fcd7b4ddd41426d673f79d387822241abc2..5a70760d53d81e99ae3e3bf71b21a9d0ba9f190d 100644 (file)
--- a/hacks/screenhack.c
+++ b/hacks/screenhack.c
@@ -299,6 +299,10 @@ main (int argc, char **argv)
   dpy = XtDisplay (toplevel);
   db = XtDatabase (dpy);
   XtGetApplicationNameAndClass (dpy, &progname, &progclass);
+
+  /* half-assed way of avoiding buffer-overrun attacks. */
+  if (strlen (progname) >= 100) progname[100] = 0;
+
   XSetErrorHandler (screenhack_ehandler);
 
   XA_WM_PROTOCOLS = XInternAtom (dpy, "WM_PROTOCOLS", False);