Re: [pacman-dev] [PATCH] pacman/callback: fix buffer over-read

On 08/03/19 at 01:27am, László Várady wrote:

Commit 11ab9aa9f5f0f3873df89c73e8715b82f485bd9b replaced a strcpy() call with memcpy(), without copying the terminating null character.

Since fname is allocated with malloc(), subsequent strstr() calls will overrun the buffer's boundary.

Signed-off-by: László Várady <laszlo.varady93@gmail.com>

ACK.