Fixed buffer overflow in the files promise

Ticket: SEC-1892
Changelog: Title
Signed-off-by: Lars Erik Wik <lars.erik.wik@northern.tech>
(cherry picked from commit f3388b1)

Author: larsewi

cf-agent/verify_files.c

@@ -60,6 +60,9 @@
 #include <evalfunction.h>
 #include <changes_chroot.h>     /* PrepareChangesChroot(), RecordFileChangedInChroot() */
 #include <cf3.defs.h>
+#include <logging.h>
+#include <stddef.h>
+#include <string.h>
 
 static PromiseResult FindFilePromiserObjects(EvalContext *ctx, const Promise *pp);
 static PromiseResult VerifyFilePromise(EvalContext *ctx, char *path, const Promise *pp);
@@ -1013,12 +1016,26 @@ PromiseResult ScheduleEditOperation(EvalContext *ctx, char *filename,
         if ((vp = PromiseGetConstraintAsRval(pp, "edit_line", RVAL_TYPE_FNCALL)))
         {
             fp = (FnCall *) vp;
-            strcpy(edit_bundle_name, fp->name);
+            size_t ret = strlcpy(edit_bundle_name, fp->name, sizeof(edit_bundle_name));
+            if (ret >= sizeof(edit_bundle_name))
+            {
+                Log(LOG_LEVEL_ERR,
+                    "The edit_line bundle name is too long (%zu >= %zu)",
+                    ret, sizeof(edit_bundle_name));
+                goto exit;
+            }
             args = fp->args;
         }
         else if ((vp = PromiseGetConstraintAsRval(pp, "edit_line", RVAL_TYPE_SCALAR)))
         {
-            strcpy(edit_bundle_name, (char *) vp);
+            size_t ret = strlcpy(edit_bundle_name, (char *) vp, sizeof(edit_bundle_name));
+            if (ret >= sizeof(edit_bundle_name))
+            {
+                Log(LOG_LEVEL_ERR,
+                    "The edit_line bundle name is too long (%zu >= %zu)",
+                    ret, sizeof(edit_bundle_name));
+                goto exit;
+            }
             args = NULL;
         }
         else
@@ -1051,12 +1068,26 @@ PromiseResult ScheduleEditOperation(EvalContext *ctx, char *filename,
         if ((vp = PromiseGetConstraintAsRval(pp, "edit_xml", RVAL_TYPE_FNCALL)))
         {
             fp = (FnCall *) vp;
-            strcpy(edit_bundle_name, fp->name);
+            size_t ret = strlcpy(edit_bundle_name, fp->name, sizeof(edit_bundle_name));
+            if (ret >= sizeof(edit_bundle_name))
+            {
+                Log(LOG_LEVEL_ERR,
+                    "The edit_xml bundle name is too long (%zu >= %zu)",
+                    ret, sizeof(edit_bundle_name));
+                goto exit;
+            }
             args = fp->args;
         }
         else if ((vp = PromiseGetConstraintAsRval(pp, "edit_xml", RVAL_TYPE_SCALAR)))
         {
-            strcpy(edit_bundle_name, (char *) vp);
+            size_t ret = strlcpy(edit_bundle_name, (char *) vp, sizeof(edit_bundle_name));
+            if (ret >= sizeof(edit_bundle_name))
+            {
+                Log(LOG_LEVEL_ERR,
+                    "The edit_xml bundle name is too long (%zu >= %zu)",
+                    ret, sizeof(edit_bundle_name));
+                goto exit;
+            }
             args = NULL;
         }
         else