Merge pull request s-macke#2 from mft1/master

Fixed security vulnerability for arbitrary code execution
mgrinzPlayer · Jun 3, 2015 · 78f363d · 78f363d
2 parents 5a63e72 + 1aa2725
commit 78f363d
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/src/main.c b/src/main.c
@@ -169,8 +169,8 @@ int main(int argc, char **argv)
 	{
 		if (argv[i][0] != '-')
 		{
-			strcat(input, argv[i]);
-			strcat(input, " ");
+			strncat(input, argv[i], 256);
+			strncat(input, " ", 256);
 		} else
 		{
 			if (strcmp(&argv[i][1], "wav")==0)
@@ -230,11 +230,11 @@ int main(int argc, char **argv)
 
 	if (!phonetic)
 	{
-		strcat(input, "[");
+		strncat(input, "[", 256);
 		if (!TextToPhonemes(input)) return 1;
 		if (debug)
 			printf("phonetic input: %s\n", input);
-	} else strcat(input, "\x9b");
+	} else strncat(input, "\x9b", 256);
 
 #ifdef USESDL
 	if ( SDL_Init(SDL_INIT_AUDIO) < 0 )