Security tweak on readlink().
Jarkko Hietaniemi [Wed, 20 Jun 2001 14:03:20 +0000 (14:03 +0000)]
p4raw-id: //depot/perl@10753

pp_sys.c

index c3b34c6..b95875b 100644 (file)
--- a/pp_sys.c
+++ b/pp_sys.c
@@ -3515,7 +3515,7 @@ PP(pp_readlink)
     TAINT;
 #endif
     tmps = POPpx;
-    len = readlink(tmps, buf, sizeof buf);
+    len = readlink(tmps, buf, sizeof(buf) - 1);
     EXTEND(SP, 1);
     if (len < 0)
        RETPUSHUNDEF;