Fix segfault

diff --git a/ChangeLog b/ChangeLog
index 0bf1a55756ca6dff6df4c472e9e6ee858dfaee87..69a477ec724d693a0ced80fb2f42cd2c3406a15c 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -3,6 +3,8 @@
    <marc.fournier@acadiau.ca>
  - Wrote autoconf tests for integer bit-types
  - Fixed enabling kerberos support
+ - Fix segfault in ssh-keygen caused by buffer overrun in filename 
+   handling.
 
 19991119
  - Merged PAM buffer overrun patch from Chip Salzenberg <chip@valinux.com>

diff --git a/ssh-keygen.c b/ssh-keygen.c
index b1baeced11b598a3b6d29ba4f487377de36f6f1c..5413ba6c3c3f15fa06584d7401a5088fc055bfd7 100644 (file)
--- a/ssh-keygen.c
+++ b/ssh-keygen.c
@@ -570,6 +570,7 @@ main(int ac, char **av)
 
   /* Save the public key in text format in a file with the same name but
      .pub appended. */
+  file = xrealloc(file, strlen(file) + 5);
   strcat(file, ".pub");
   f = fopen(file, "w");
   if (!f)