News for hackers. Stuff that matters.

A comment on Douane personal firewall for GNU/Linux. Parent comment

Re:Douane personal firewall for GNU/Linux by iMerNibor on Saturday January 21, 2017 @09:57PM (#13453351)
They do check the string size before using strncpy though, so it should be fine
[ Parent | on HN ]
Re:Douane personal firewall for GNU/Linux by ori_b on Sunday January 22, 2017 @12:59AM (#13453844)
The check is off by one. If it's equal in length to the buffer, then the buffer will not be nul terminated.
[ Parent | on HN ]