Fix buffer overflows in df(1), format(1)

diff --git a/commands/df/df.c b/commands/df/df.c
index 244ead4dca8704ff9949ec0732f7429aae8a6e8b..be07620b86cb34bd2959b89412be6b51e7024ebb 100644 (file)
--- a/commands/df/df.c
+++ b/commands/df/df.c
@@ -109,7 +109,8 @@ static void readmtab(const char *type)
 {
   struct mtab **amt= &mtab, *new;
   struct stat st;
-  char devname[128], mountpoint[128], version[10], rw_flag[10];
+  char devname[PATH_MAX], mountpoint[PATH_MAX], version[MNTNAMELEN],
+       rw_flag[MNTFLAGLEN];
 
   if (load_mtab("df") < 0) exit(1);
 

diff --git a/commands/format/format.c b/commands/format/format.c
index f5fbbfb28c5b038b45669213c7f6d8c8e979b1dd..3c9ccaa5b37d4a52d26311b674f0aa277e347c5f 100644 (file)
--- a/commands/format/format.c
+++ b/commands/format/format.c
@@ -290,7 +290,7 @@ int main(int argc, char **argv)
        int verify= 0;
        struct stat st0, st;
        char special[PATH_MAX + 1], mounted_on[PATH_MAX + 1];
-       char version[10], rw_flag[10];
+       char version[MNTNAMELEN], rw_flag[MNTFLAGLEN];
 
        /* Option -v. */
        while (argc > 1 && argv[1][0] == '-') {