fix buffer overflows.

diff --git a/src/libvlc.c b/src/libvlc.c
index f2974204dd1a2a34beccb179f788d4791c17ff61..230738844b08b97420346331ec8eea2017631085 100644 (file)
--- a/src/libvlc.c
+++ b/src/libvlc.c
@@ -1438,8 +1438,8 @@ static void Usage( libvlc_int_t *p_this, char const *psz_search )
 #endif
     char psz_spaces_text[PADDING_SPACES+LINE_START+1];
     char psz_spaces_longtext[LINE_START+3];
-    char psz_format[sizeof(COLOR_FORMAT_STRING)];
-    char psz_format_bool[sizeof(COLOR_FORMAT_STRING_BOOL)];
+    char psz_format[sizeof(COLOR_FORMAT_STRING) + 1];
+    char psz_format_bool[sizeof(COLOR_FORMAT_STRING_BOOL) + 1];
     char psz_buffer[10000];
     char psz_short[4];
     int i_width = ConsoleWidth() - (PADDING_SPACES+LINE_START+1);

diff --git a/src/playlist/loadsave.c b/src/playlist/loadsave.c
index 2fc19c04a7b03bab00ece887ee71dd346b0a1274..81d1645b0fe644c48505de47d482ae154efab7bf 100644 (file)
--- a/src/playlist/loadsave.c
+++ b/src/playlist/loadsave.c
@@ -212,11 +212,11 @@ int playlist_MLDump( playlist_t *p_playlist )
     if( !config_GetInt( p_playlist, "media-library") ) return VLC_SUCCESS;
     if( !psz_datadir ) /* XXX: This should never happen */
     {
-        msg_Err( p_playlist, "no data directory, cannot save media library") ;
+        msg_Err( p_playlist, "no data directory, cannot save media library");
         return VLC_EGENERIC;
     }
 
-    char psz_dirname[ strlen( psz_datadir ) + sizeof( DIR_SEP "ml.xspf")];
+    char psz_dirname[strlen( psz_datadir ) + sizeof( DIR_SEP "ml.xspf" ) + 1];
     strcpy( psz_dirname, psz_datadir );
     free( psz_datadir );
     if( config_CreateDir( (vlc_object_t *)p_playlist, psz_dirname ) )

diff --git a/src/stream_output/sdp.c b/src/stream_output/sdp.c
index d2c0610655df1ac88588dc4120ba48bdf1fcebca..3db8459bad64125366b115784f3de448b35ad104 100644 (file)
--- a/src/stream_output/sdp.c
+++ b/src/stream_output/sdp.c
@@ -267,7 +267,7 @@ char *vlc_sdp_Start (vlc_object_t *obj, const char *cfgpref,
     if (cfglen > 100)
         return NULL;
 
-    char varname[cfglen + sizeof ("description")], *subvar = varname + cfglen;
+    char varname[cfglen + sizeof ("description") + 1], *subvar = varname + cfglen;
     strcpy (varname, cfgpref);
 
     strcpy (subvar, "name");