From: Rasmus Lerdorf <rasmus@php.net>
Date: Tue, 1 Apr 2003 19:12:32 +0000 (+0000)
Subject: MFB
X-Git-Tag: RELEASE_0_5~221
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=20ea550235ccb8feaa7a520327cdad11ae023cf0;p=php

MFB
---

diff --git a/ext/dbase/dbf_head.c b/ext/dbase/dbf_head.c
index afaa0d724d..9ec1f40d6c 100644
--- a/ext/dbase/dbf_head.c
+++ b/ext/dbase/dbf_head.c
@@ -247,9 +247,10 @@ dbhead_t *dbf_open(char *dp, int o_flags TSRMLS_DC)
 
 	cp = dp;
 	if ((fd = VCWD_OPEN(cp, o_flags|O_BINARY)) < 0) {
-		cp = (char *)malloc(256);
-		strcpy(cp, dp); strcat(cp, ".dbf");
+		cp = (char *)malloc(MAXPATHLEN);  /* So where does this get free()'d?  -RL */
+		strncpy(cp, dp, MAXPATHLEN-5); strcat(cp, ".dbf");
 		if ((fd = VCWD_OPEN(cp, o_flags)) < 0) {
+			free(cp);
 			perror("open");
 			return NULL;
 		}