diff options
author | Jeremy Sowden <jeremy@azazel.net> | 2021-11-30 10:55:43 +0000 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2021-12-06 22:28:42 +0100 |
commit | 33e2c5b2f63844a3e08fc287d0d8921cbc3b8f86 (patch) | |
tree | 4481e8ee0687626ae3bf46b77e2ebe873ead2aa2 /ulogd.conf.in | |
parent | 23dcfc558ecfcf7cc7ef8a002dea8a3ac31f0335 (diff) |
output: MYSQL: improve mapping of DB columns to input-keys
Currently, we copy the column-name to a buffer, iterate over it to
replace the underscores with full-stops, using `strchr` from the start
of the buffer on each iteration, then copy the buffer to the input-key's
`name` member.
Apart from the inefficiency, `strncpy` is used to do the copies, which
leads gcc to complain:
ulogd_output_MYSQL.c:149:17: warning: `strncpy` output may be truncated copying 31 bytes from a string of length 31
Furthermore, the buffer is not initialized, which means that there is
also a possible buffer overrun if the column-name is too long, since
`strncpy` will not append a NUL.
Instead, copy the column-name directly to the input-key using
`snprintf`, and run `strchr` from the last underscore on each iteration.
Signed-off-by: Jeremy Sowden <jeremy@azazel.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'ulogd.conf.in')
0 files changed, 0 insertions, 0 deletions