From eb956f8a3671895873619e277412e6141cade0e9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Alexandre-Xavier=20Labont=C3=A9-Lamoureux?= Date: Thu, 25 Jun 2020 23:25:43 -0400 Subject: [PATCH] Fix buffer overflow in LoadDefaultCollection CVE-2020-15007: https://nvd.nist.gov/vuln/detail/CVE-2020-15007 --- dockerdoom/trunk/setup/configfile.c | 2 +- dockerdoom/trunk/src/m_config.c | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/dockerdoom/trunk/setup/configfile.c b/dockerdoom/trunk/setup/configfile.c index 6a6eb3f..7fa0acf 100644 --- a/dockerdoom/trunk/setup/configfile.c +++ b/dockerdoom/trunk/setup/configfile.c @@ -512,7 +512,7 @@ static void LoadDefaultCollection(default_collection_t *collection) while (!feof(f)) { - if (fscanf (f, "%79s %[^\n]\n", defname, strparm) != 2) + if (fscanf (f, "%79s %99[^\n]\n", defname, strparm) != 2) { // This line doesn't match diff --git a/dockerdoom/trunk/src/m_config.c b/dockerdoom/trunk/src/m_config.c index d0fd518..1e8f70c 100644 --- a/dockerdoom/trunk/src/m_config.c +++ b/dockerdoom/trunk/src/m_config.c @@ -1312,7 +1312,7 @@ static void LoadDefaultCollection(default_collection_t *collection) while (!feof(f)) { - if (fscanf (f, "%79s %[^\n]\n", defname, strparm) != 2) + if (fscanf (f, "%79s %99[^\n]\n", defname, strparm) != 2) { // This line doesn't match