From 2823e13f67239db7deb7274f3a47bfbff56c7c64 Mon Sep 17 00:00:00 2001 From: Philipp Takacs Date: Sat, 17 Jan 2015 02:00:22 +0100 Subject: [PATCH] Initialize vecp in send anno() Access to an uninialized variable can cause a a buffer overflow or underrun. (Thanks to the compiler for reporting.) --- uip/send.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/uip/send.c b/uip/send.c index b85963d..ed6b08d 100644 --- a/uip/send.c +++ b/uip/send.c @@ -678,7 +678,7 @@ anno(struct stat *st) char *msgs, *folder; char buf[BUFSIZ]; char *vec[MAXARGS]; - int vecp; + int vecp = 0; char *cp, *dp; if (altmsg && (stat(altmsg, &st2) == NOTOK || -- 1.7.10.4