apparmor/attach: make sure buffer is NUL-terminated

Signed-off-by: Christian Seiler <christian@iwakd.de>
Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

diff --git a/src/lxc/apparmor.c b/src/lxc/apparmor.c
index a2d6476729f61abc827b62aef2b0904087501f09..cb81464ffa6eb3e2558c9a098495e32c1488371c 100644 (file)
--- a/src/lxc/apparmor.c
+++ b/src/lxc/apparmor.c
@@ -42,12 +42,13 @@ again:
        }
        sz += 1024;
        buf = realloc(buf, sz);
+       memset(buf, 0, sz);
        if (!buf) {
                ERROR("out of memory");
                fclose(f);
                return NULL;
        }
-       ret = fread(buf, 1, sz, f);
+       ret = fread(buf, 1, sz - 1, f);
        fclose(f);
        if (ret >= sz)
                goto again;