lib/string: Str_Strncat boundary check improvement to prevent buffer overflow.

diff --git a/open-vm-tools/lib/string/str.c b/open-vm-tools/lib/string/str.c
index 8568414c92032823de17c37ac2db07609b79d396..79e77cab97acc756ef8167b3bb57f9388ef4eb40 100644 (file)
--- a/open-vm-tools/lib/string/str.c
+++ b/open-vm-tools/lib/string/str.c
@@ -465,6 +465,7 @@ Str_Strncat(char *buf,       // IN/OUT
     */
 
    bufLen = strlen(buf);
+   bufLen = MIN(bufLen, bufSize);  // Prevent potential overflow
 
    if (!(bufLen + n < bufSize ||
          bufLen + strlen(src) < bufSize)) {