buffer overflow, day fencepost

SCCS-vsn: usr.bin/chpass/util.c 5.9

diff --git a/usr/src/usr.bin/chpass/util.c b/usr/src/usr.bin/chpass/util.c
index 9053e50..81a3a2b 100644 (file)
--- a/usr/src/usr.bin/chpass/util.c
+++ b/usr/src/usr.bin/chpass/util.c
@@ -16,7 +16,7 @@
  */
 
 #ifndef lint
  */
 
 #ifndef lint

-static char sccsid[] = "@(#)util.c     5.8 (Berkeley) %G%";
+static char sccsid[] = "@(#)util.c     5.9 (Berkeley) %G%";

 #endif /* not lint */
 
 #include <sys/types.h>
 #endif /* not lint */
 
 #include <sys/types.h>


@@ -40,7 +40,7 @@ ttoa(tval)
        time_t tval;
 {
        struct tm *tp;
        time_t tval;
 {
        struct tm *tp;

-       static char tbuf[10];
+       static char tbuf[50];

 
        if (tval) {
                tp = localtime(&tval);
 
        if (tval) {
                tp = localtime(&tval);


@@ -98,7 +98,7 @@ bad:          return(1);
                    DAYSPERLYEAR : DAYSPERNYEAR;
        while (--month)
                tval += dmsize[month];
                    DAYSPERLYEAR : DAYSPERNYEAR;
        while (--month)
                tval += dmsize[month];

-       tval += day - 1;
+       tval += day;

        tval = tval * HOURSPERDAY * MINSPERHOUR * SECSPERMIN;
        tval -= lt->tm_gmtoff;
        *store = tval;
        tval = tval * HOURSPERDAY * MINSPERHOUR * SECSPERMIN;
        tval -= lt->tm_gmtoff;
        *store = tval;