Added fix from David Vrabel <dvrabel@arcom.co.uk> for a

buffer overrun in find_real_root_device(), fixing bug #1019
 -Erik

1 files changed, 1 insertions, 1 deletions

diff --git a/utility.c b/utility.c
index 3422d997a..28e333e6f 100644
--- a/utility.c
+++ b/utility.c
@@ -1636,7 +1636,7 @@ extern int find_real_root_device_name(char* name)
                 if (strcmp(entry->d_name, "..") == 0)
                         continue;
 
-                sprintf( fileName, "/dev/%s", entry->d_name);
+                snprintf( fileName, strlen(name)+1, "/dev/%s", entry->d_name);
 
                 if (stat(fileName, &statBuf) != 0)
                         continue;