selinux-shadow/shadow-strncpy-usage.patch

   1 diff -ur shadow-4.1.4.3.orig/src/login.c shadow-4.1.4.3/src/login.c
   2 --- shadow-4.1.4.3.orig/src/login.c     2011-03-05 22:17:10.032524948 -0800
   3 +++ shadow-4.1.4.3/src/login.c  2011-03-05 22:17:59.154342059 -0800
   4 @@ -748,8 +748,9 @@
   5                                   sizeof (loginprompt),
   6                                   _("%s login: "), hostn);
   7                 } else {
   8 +                       loginprompt[sizeof (loginprompt) - 1] = '\0';
   9                         strncpy (loginprompt, _("login: "),
  10 -                                sizeof (loginprompt));
  11 +                                sizeof (loginprompt) - 1);
  12                 }
  13
  14                 retcode = pam_set_item (pamh, PAM_USER_PROMPT, loginprompt);
  15 diff -ur shadow-4.1.4.3.orig/src/usermod.c shadow-4.1.4.3/src/usermod.c
  16 --- shadow-4.1.4.3.orig/src/usermod.c   2011-03-05 22:17:10.029191265 -0800
  17 +++ shadow-4.1.4.3/src/usermod.c        2011-03-05 22:18:42.665576968 -0800
  18 @@ -182,7 +182,8 @@
  19         struct tm *tp;
  20
  21         if ((negativ != NULL) && (date < 0)) {
  22 -               strncpy (buf, negativ, maxsize);
  23 +               buf[maxsize - 1] = '\0';
  24 +               strncpy (buf, negativ, maxsize - 1);
  25         } else {
  26                 time_t t = (time_t) date;
  27                 tp = gmtime (&t);