From 70099c7763b8c47a4bb1eef1c41601c602a83270 Mon Sep 17 00:00:00 2001 From: Florian Weimer Date: Mon, 12 Jul 2021 07:58:07 +0200 Subject: nis: nis_local_group may read from __nisgroup[-1] (bug 28075) Reviewed-by: Carlos O'Donell --- nis/nis_local_names.c | 1 + 1 file changed, 1 insertion(+) (limited to 'nis') diff --git a/nis/nis_local_names.c b/nis/nis_local_names.c index 080dcf8..218764f 100644 --- a/nis/nis_local_names.c +++ b/nis/nis_local_names.c @@ -31,6 +31,7 @@ nis_local_group (void) char *cptr; if (__nisgroup[0] == '\0' && (cptr = getenv ("NIS_GROUP")) != NULL + && cptr[0] != '\0' && strlen (cptr) < NIS_MAXNAMELEN) { char *cp = stpcpy (__nisgroup, cptr); -- cgit v1.1