Prevent buffer overflows.

1 files changed, 10 insertions, 0 deletions

diff --git a/lib/libz/minigzip.c b/lib/libz/minigzip.c
index ba4b2dc..e8a61b1 100644
--- a/lib/libz/minigzip.c
+++ b/lib/libz/minigzip.c
@@ -200,6 +200,11 @@ void file_compress(file, mode)
     FILE  *in;
     gzFile out;
 
+    if (strlen(file) + strlen(GZ_SUFFIX) >= sizeof(outfile)) {
+        fprintf(stderr, "%s: nilename too long\n", prog);
+        exit(1);	    
+    }
+    
     strcpy(outfile, file);
     strcat(outfile, GZ_SUFFIX);
 
@@ -231,6 +236,11 @@ void file_uncompress(file)
     gzFile in;
     int len = strlen(file);
 
+    if (len + strlen(GZ_SUFFIX) >= sizeof(buf)) {
+        fprintf(stderr, "%s: filename too long\n", prog);
+        exit(1);	    
+    }
+
     strcpy(buf, file);
 
     if (len > SUFFIX_LEN && strcmp(file+len-SUFFIX_LEN, GZ_SUFFIX) == 0) {