* Replaced strcpy() with safestrcpy() in cmd_setp()

diff --git a/citadel/ChangeLog b/citadel/ChangeLog
index 19cee5f7efe997cd6652d061ec68579c10ced75b..fa693039f2082ea6be9308631d9a9e8d12abe8a5 100644 (file)
--- a/citadel/ChangeLog
+++ b/citadel/ChangeLog
@@ -1,4 +1,7 @@
  $Log$
+ Revision 607.22  2003/07/14 17:12:28  ajc
+ * Replaced strcpy() with safestrcpy() in cmd_setp()
+
  Revision 607.21  2003/07/14 03:07:05  ajc
  * ipgm_secret is no longer set during setup.  Now it is set at server startup
    and automatically changes whenever an IPGM command is executed.
@@ -4859,4 +4862,3 @@ Sat Jul 11 00:20:48 EDT 1998 Nathan Bryant <bryant@cs.usm.maine.edu>
 
 Fri Jul 10 1998 Art Cancro <ajc@uncensored.citadel.org>
        * Initial CVS import
-

diff --git a/citadel/user_ops.c b/citadel/user_ops.c
index 87c957564c1068208fac67b2f58717b06a96cd3a..cd8085cc2b85b50f3268f344df9edbe429bcdae1 100644 (file)
--- a/citadel/user_ops.c
+++ b/citadel/user_ops.c
@@ -896,7 +896,7 @@ void cmd_setp(char *new_pw)
                return;
        }
        lgetuser(&CC->user, CC->curr_user);
-       strcpy(CC->user.password, new_pw);
+       safestrncpy(CC->user.password, new_pw, sizeof(CC->user.password));
        lputuser(&CC->user);
        cprintf("%d Password changed.\n", CIT_OK);
        lprintf(3, "Password changed for user <%s>\n", CC->curr_user);