bugfix for a memory-reuse bug spost and whom

spost and whom use add to initialize a temporary char*.
This pointer maybe points to internal data or already freed
memory. Now getcpy is used.

diff --git a/uip/spost.c b/uip/spost.c
index 48f97978dbd3319f66df156cd91c494a0687c2d4..ac2843fd08e9c7ca6857f14dca7370fe96d884ff 100644 (file)
--- a/uip/spost.c
+++ b/uip/spost.c
@@ -228,7 +228,7 @@ main(int argc, char **argv)
 
                case FLDPLUS:
                        compnum++;
-                       cp = add(buf, cp);
+                       cp = getcpy(buf);
                        while (state == FLDPLUS) {
                                state = m_getfld(state, name, buf,
                                                sizeof(buf), in);

diff --git a/uip/whom.c b/uip/whom.c
index e61dc62327e8f0686d09dfa76362fa5dca3d6957..4b15fbdc8163a107a52a31f29a44750d41dbd101 100644 (file)
--- a/uip/whom.c
+++ b/uip/whom.c
@@ -193,7 +193,7 @@ process(char *file)
 
                case FLDPLUS:
                        compnum++;
-                       cp = add(buf, cp);
+                       cp = getcpy(buf);
                        while (state == FLDPLUS) {
                                state = m_getfld(state, name, buf,
                                                sizeof(buf), in);