buffer overflow patched (#251)

Thank you for the PR
HardySimpson · Feb 29, 2024 · c47f781 · c47f781
1 parent 355ddf9
commit c47f781
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/rule.c b/src/rule.c
@@ -880,8 +880,10 @@ zlog_rule_t *zlog_rule_new(char *line,
 		}
 		break;
 	case '$' :
-		sscanf(file_path + 1, "%s", a_rule->record_name);
-
+		// read only MAXLEN_PATH characters from the file_path + 1
+		strncpy(a_rule->record_name, file_path + 1, MAXLEN_PATH);
+		a_rule->record_name[MAXLEN_PATH] = '\0';
+
 		if (file_limit) {  /* record path exists */
 			p = strchr(file_limit, '"');
 			if (!p) {