From 08d61505d7229aaa5484439b2f2e98add3052afe Mon Sep 17 00:00:00 2001
From: Damien Miller <djm@mindrot.org>
Date: Sun, 26 Mar 2006 14:28:32 +1100
Subject:    - deraadt@cvs.openbsd.org 2006/03/25 18:43:30      [channels.c]   
   use strtonum() instead of atoi() [limit X screens to 400, sorry]

---
 channels.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'channels.c')

diff --git a/channels.c b/channels.c
index c838b8534..70ffd7b33 100644
--- a/channels.c
+++ b/channels.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: channels.c,v 1.244 2006/03/25 13:17:01 djm Exp $ */
+/* $OpenBSD: channels.c,v 1.245 2006/03/25 18:43:30 deraadt Exp $ */
 /*
  * Author: Tatu Ylonen <ylo@cs.hut.fi>
  * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -3079,7 +3079,7 @@ x11_request_forwarding_with_spoofing(int client_session_id, const char *disp,
 	if (cp)
 		cp = strchr(cp, '.');
 	if (cp)
-		screen_number = atoi(cp + 1);
+		screen_number = (u_int)strtonum(cp + 1, 0, 400, NULL);
 	else
 		screen_number = 0;
 
-- 
cgit v1.2.3