Hello,

I've done a partial audit of uses of fgets in 
git://git.samba.org/samba.git and found several cases in which an input of a NUL byte at beginning of line can cause access or even modification of line[-1], which might even result in a segmentation violation.

In fixing these, you'll want to consider whether it is appropriate to discard the "line" following that possible leading NUL byte.  A good alternative is to use getline.  Since it tells you the number of bytes read, it does not have this problem.

I don't know which components might be affected by these uses of fgets, so I have simply listed libsmbclient.  Likewise for the Version.

Regards,

Jim

source3/utils/eventlogadm.c:            if (fgets( linein, sizeof( linein ) - 1, f1 ) == NULL) {
source3/utils/eventlogadm.c-                    break;
source3/utils/eventlogadm.c-            }
source3/utils/eventlogadm.c-            linein[strlen( linein ) - 1] = 0;
---
source3/utils/net_rpc.c-                if (line[strlen(line)-1] == '\n')
source3/utils/net_rpc.c-                        line[strlen(line)-1] = '\0';
---
source3/utils/smbget.c:         if (fgets(tmp, sizeof(tmp), stdin) == NULL) {
source3/utils/smbget.c-                 return;
source3/utils/smbget.c-         }
source3/utils/smbget.c-         if(tmp[strlen(tmp)-1] == '\n')tmp[strlen(tmp)-1] = '\0';
---
source4/torture/nbench/nbench.c:        while (fgets(line, sizeof(line)-1, f)) {
...
source4/torture/nbench/nbench.c-                line[strlen(line)-1] = 0;