diff -up sudo-1.7.2p1/find_path.c.pseudocmd2 sudo-1.7.2p1/find_path.c --- sudo-1.7.2p1/find_path.c.pseudocmd2 2010-04-13 12:25:28.000000000 +0200 +++ sudo-1.7.2p1/find_path.c 2010-04-13 12:25:36.000000000 +0200 @@ -126,7 +126,10 @@ find_path(infile, outfile, sbp, path) * Check current dir if dot was in the PATH */ if (!result && checkdot) { - result = sudo_goodpath(infile, sbp); + len = snprintf(command, sizeof(command), "./%s", infile); + if (len <= 0 || len >= sizeof(command)) + errorx(1, "%s: File name too long", infile); + result = sudo_goodpath(command, sbp); if (result && def_ignore_dot) return(NOT_FOUND_DOT); }