String safety, courtesy of snprintf, strlcat and strlcpy.

GPSD is now free from the often-misused strcat, strcpy and
sprintf. Future code should not use unbounded string functions. Glibc
users, please verify that the integrated strlcat and strlcpy are
correctly linked in.

1 files changed, 2 insertions, 2 deletions

diff --git a/gpsflash.c b/gpsflash.c
index f5e35cc9..bd358099 100644
--- a/gpsflash.c
+++ b/gpsflash.c
@@ -20,8 +20,8 @@ void gpsd_report(int errlevel, const char *fmt, ... )
 	char buf[BUFSIZ];
 	va_list ap;
 
-	strcpy(buf, progname);
-	strcat(buf, ": ");
+	strlcpy(buf, progname, BUFSIZ);
+	strlcat(buf, ": ", BUFSIZ);
 	va_start(ap, fmt) ;
 	(void)vsnprintf(buf + strlen(buf), sizeof(buf)-strlen(buf), fmt, ap);
 	va_end(ap);