tags 354662 patch thanks > Dear mentors,
Hi, > I am looking for a sponsor for the new version 0.8-11 > of my package "scrot". > > It builds these binary packages: > scrot - command line screen capture utility > > The package appears to be lintian clean. > > The upload would fix these bugs: 547486, 549123 The following patch also fixes the long standing #354662, please apply. > The package can be found on mentors.debian.net: > - URL: http://mentors.debian.net/debian/pool/main/s/scrot > - Source repository: deb-src http://mentors.debian.net/debian unstable main > contrib non-free - dget > http://mentors.debian.net/debian/pool/main/s/scrot/scrot_0.8-11.dsc > > I would be glad if someone uploaded this package for me. Will do. -- pub 4096R/0E4BD0AB <people.fccf.net/danchev/key pgp.mit.edu>
diff -Naur scrot-0.8.orig/src/options.c scrot-0.8/src/options.c --- scrot-0.8.orig/src/options.c 2009-10-26 10:52:24.000000000 +0200 +++ scrot-0.8/src/options.c 2009-10-26 10:52:33.000000000 +0200 @@ -118,6 +118,11 @@ name, we grab all the files in there, but not subdirs */ if (!opt.output_file) { + if ( strlen(argv[optind++]) > PATH_MAX ) { + printf("output filename too long.\n"); + exit(EXIT_FAILURE); + } + opt.output_file = argv[optind++]; if (opt.thumb) opt.thumb_file = name_thumbnail(opt.output_file);