This patch was created by oCert according to
 http://www.ocert.org/advisories/ocert-2008-014.html
Unfortunately the original patch contained a bug which was
later fixed by the issuer of the patch Rob Holland <rob@ocert.org>
This part was now separated in this file.

--- a/lib/search.c
+++ b/lib/search.c
@@ -1568,7 +1568,8 @@ char *findtheinfo(char *searchstr, int d
 			bufstart[0] = '\n';
 			bufstart++;
 		    }
-		    strncpy(bufstart, tmpbuf, strlen(tmpbuf));
+                   /* Avoid writing a trailing \0 after the string */
+                   memcpy(bufstart, tmpbuf, strlen(tmpbuf));
 		    bufstart = searchbuffer + strlen(searchbuffer);
 		}
 	    }
onchange='this.form.submit();'>
<option value='koszko' selected='selected'>koszko</option>
<option value='koszko-scripts'>koszko-scripts</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>Wojtek's customized Guix</td><td class='sub right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=3ee9355e2fd2d0fcee1076ca1160ba5881b73da8'>refs</a><a class='active' href='/guix/log/nix/libutil'>log</a><a href='/guix/tree/nix/libutil?id=3ee9355e2fd2d0fcee1076ca1160ba5881b73da8'>tree</a><a href='/guix/commit/nix/libutil?id=3ee9355e2fd2d0fcee1076ca1160ba5881b73da8'>commit</a><a href='/guix/diff/nix/libutil?id=3ee9355e2fd2d0fcee1076ca1160ba5881b73da8'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/nix/libutil'>
<input type='hidden' name='id' value='3ee9355e2fd2d0fcee1076ca1160ba5881b73da8'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=3ee9355e2fd2d0fcee1076ca1160ba5881b73da8'>root</a>/<a href='/guix/log/nix?id=3ee9355e2fd2d0fcee1076ca1160ba5881b73da8'>nix</a>/<a href='/guix/log/nix/libutil?id=3ee9355e2fd2d0fcee1076ca1160ba5881b73da8'>libutil</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/nix/libutil?id=3ee9355e2fd2d0fcee1076ca1160ba5881b73da8&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2016-05-31 18:22:14 +0200'>2016-05-31</span></td><td><a href='/guix/commit/nix/libutil?id=75abbd0cbe2c42f07fa104f97bd206891eb576ef'>daemon: Remove unused XML output code.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2015-12-02 19:37:59 +0200'>2015-12-02</span></td><td><a href='/guix/commit/nix/libutil?id=14fb686a21d786afa699a38d20929a88be6e541d'>daemon: Fix namespace issue.</a></td><td>Eelco Dolstra</td></tr>
<tr><td><span title='2015-12-02 19:37:59 +0200'>2015-12-02</span></td><td><a href='/guix/commit/nix/libutil?id=29d3242e5c428d3b0e8dc9db1c81cd4053e5271c'>daemon: Support SHA-512 hashes.</a><span class='msg-avail'>...</span></td><td>Eelco Dolstra</td></tr>
<tr><td><span title='2015-12-02 19:37:59 +0200'>2015-12-02</span></td><td><a href='/guix/commit/nix/libutil?id=79aa1a83054af1600ba235ddf305337b5df78271'>daemon: int2String -&gt; std::to_string.</a></td><td>Eelco Dolstra</td></tr>
<tr><td><span title='2015-07-03 00:30:55 +0200'>2015-07-03</span></td><td><a href='/guix/commit/nix/libutil?id=322eeb87d0e5bb608ae1c176611a50297c93cbe8'>Merge branch 'nix'.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2015-06-03 22:59:02 +0200'>2015-06-03</span></td><td><a href='/guix/commit/nix/libutil?id=54c260e6ecc81f1836bda844ec8e661d51bfb867'>Merge branch 'nix'.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2015-05-19 16:09:58 +0200'>2015-05-19</span></td><td><a href='/guix/commit/nix/libutil?id=2bb04905f86f9c3f1d27557fbff8cbdc776560a3'>Merge branch 'nix'.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2015-05-19 16:09:58 +0200'>2015-05-19</span></td><td><a href='/guix/commit/nix/libutil?id=a88b8c5c985a87586159c0621974a1dfe5b9b92d'>Revert "daemon: Fix possible use-after-free."</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2015-05-11 23:01:20 +0200'>2015-05-11</span></td><td><a href='/guix/commit/nix/libutil?id=1303a4a4517260def862ce7fe97e6b28dd8005e1'>daemon: Fix possible use-after-free.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2015-01-04 23:27:34 +0100'>2015-01-04</span></td><td><a href='/guix/commit/nix/libutil?id=15ddeff532b517843668eef8f615838d15b4f75c'>Merge commit a1dd396cc02922372314c35c8035a38bfeea08df of branch 'nix'.</a></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2014-12-19 22:47:37 +0100'>2014-12-19</span></td><td><a href='/guix/commit/nix/libutil?id=36457566f9917dc7c0c348d012816a2ca333ef1b'>Merge branch 'nix' into 'master'.</a></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2013-12-19 00:02:49 +0100'>2013-12-19</span></td><td><a href='/guix/commit/nix/libutil?id=0c5028faea7e5c08c920f8ea31f02e7923b8c2d8'>daemon: Fix 'HashSink::currentHash()'.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2013-09-12 14:09:29 +0200'>2013-09-12</span></td><td><a href='/guix/commit/nix/libutil?id=ea1673808584f3c40cc76cc2ea570676309ba5bc'>daemon: Use 'int' instead of the internal 'gcry_md_algo_t' type.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2013-01-06 00:47:50 +0100'>2013-01-06</span></td><td><a href='/guix/commit/nix/libutil?id=233e76769ae3a438bff7117c68f2c88739a28db0'>Update license headers.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2012-12-04 23:51:48 +0100'>2012-12-04</span></td><td><a href='/guix/commit/nix/libutil?id=0adb527600a40055383970330f572e9f0399cd75'>daemon: Fix typo in libgcrypt bindings.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2012-12-03 23:05:08 +0100'>2012-12-03</span></td><td><a href='/guix/commit/nix/libutil?id=c2033df432af87d0176347858c7d11acfe2ed89f'>build: Include a copy of Nix's libstore and daemon; build it.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>