From kde-commits Wed Dec 11 13:12:03 2002 From: Waldo Bastian Date: Wed, 11 Dec 2002 13:12:03 +0000 To: kde-commits Subject: KDE_3_1_BRANCH: kdelibs/kdoctools X-MARC-Message: https://marc.info/?l=kde-commits&m=103961244408054 CVS commit by waba: In the hands of a sufficiently unskilled person, strlcpy can be dangerous too. M +6 -2 xslt.cpp 1.51.2.4 --- kdelibs/kdoctools/xslt.cpp #1.51.2.3:1.51.2.4 @@ -416,5 +416,7 @@ QCString fromUnicode( const QString &dat QCString test = locale->fromUnicode( part.mid( i, 1 ) ); if ( locale->toUnicode( test ) == part.mid( i, 1 ) ) { - strlcpy( buffer + buffer_len, test.data(), sizeof(buffer) ); + if (buffer_len + test.length() + 1 > sizeof(buffer)) + break; + strcpy( buffer + buffer_len, test.data() ); buffer_len += test.length(); } else { @@ -422,5 +424,7 @@ QCString fromUnicode( const QString &dat res.sprintf( "&#%d;", part.at( i ).unicode() ); test = locale->fromUnicode( res ); - strlcpy( buffer + buffer_len, test.data(), sizeof(buffer) ); + if (buffer_len + test.length() + 1 > sizeof(buffer)) + break; + strcpy( buffer + buffer_len, test.data() ); buffer_len += test.length(); }