0022378: Small patch to fix buffer vulnerability of Draw

diff --git a/src/Draw/Draw_Window.cxx b/src/Draw/Draw_Window.cxx
index 587ef5f396e855845b8dc9f47e5d4507dd05351b..2370d1c1a798066738f58ebd5f0a3eb3da2b3e1b 100755 (executable)
--- a/src/Draw/Draw_Window.cxx
+++ b/src/Draw/Draw_Window.cxx
@@ -1945,8 +1945,9 @@ static Tk_Window mainWindow;
 //* threads sinchronization *//
 DWORD  dwMainThreadId;
 console_semaphore_value volatile console_semaphore = WAIT_CONSOLE_COMMAND;
-char console_command[1000];
-
+//char console_command[1000];
+#define COMMAND_SIZE 1000     /* Console Command size */
+char console_command[COMMAND_SIZE];
 bool volatile isTkLoopStarted = false;
 
 /*--------------------------------------------------------*\
@@ -2025,7 +2026,8 @@ static DWORD WINAPI readStdinThreadFunc(VOID)
   while (1) {
     while (console_semaphore != WAIT_CONSOLE_COMMAND)
       Sleep(100);
-    if (gets(console_command))
+    //if (gets(console_command))
+       if (fgets(console_command,COMMAND_SIZE,stdin)) 
       {
         console_semaphore = HAS_CONSOLE_COMMAND;
       }