Several places were not using safe_qbuf or anything equivalent to avoid overflowing a QBUFSZ buffer. Add more uses plus one special case. For the current max lengths returned by xname(), I think this is sufficient. This addresses a reported buffer overflow for a "thoroughly rusty thoroughly corroded helm of opposite alignment", plus more.
6.9 KiB
6.9 KiB