readdir: string length bug fix

If len is 32 (maximum possible value), then we going to write at buf->d_name[31]. Since the d_name length is 31, write is performed outside the string boundaries.

diff --git a/Library/libs/readdir.c b/Library/libs/readdir.c
index e326dfe..44f0afe 100644 (file)
--- a/Library/libs/readdir.c
+++ b/Library/libs/readdir.c
@@ -34,6 +34,6 @@ struct dirent *readdir(DIR * dir)
        buf->d_off = -1;        /* FIXME */
        buf->d_reclen = len + 1;
        strncpy(buf->d_name, (char *) direntry.d_name, len - 2);
-       buf->d_name[len - 1] = 0;
+       buf->d_name[len - 2] = 0;
        return buf;
 }