mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2024-11-27 00:57:50 +00:00
Code Issues Releases Activity

Fix remote buffer overflow vulnerability.

Browse Source 
References:	SPSadvisory#38
		http://shadowpenguin.backsection.net/advisories/advisory038.html
		(Japanese only)
		http://shadowpenguin.backsection.net/advisories/index.html
		(English abstract included)

Max, should we use "canna" UID for sandbox'ing?
This commit is contained in:
Jun Kuriyama 2000-06-30 01:47:44 +00:00
parent a573eb43bc
commit 6366da8219
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=30005
3 changed files with 66 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
japanese/Canna/files/patch-af Normal file
View File

@ -0,0 +1,22 @@
--- server/misc.c~ Fri Jul 29 12:03:54 1994
+++ server/misc.c Fri Jun 30 10:16:39 2000
@@ -788,12 +788,19 @@
if (client->username && client->username[0]) {
if (client->groupname && client->groupname[0]) {
+ if (strlen(DDUSER) + strlen(client->username) +
+ strlen(DDGROUP) + strlen(client->groupname) +
+ strlen(DDPATH) >= 256)
+ return ( -1 );
sprintf(dichome, "%s/%s:%s/%s:%s",
DDUSER, client->username,
DDGROUP, client->groupname,
DDPATH);
}
else {
+ if (strlen(DDUSER) + strlen(client->username) +
+ strlen(DDPATH) >= 256)
+ return ( -1 );
sprintf(dichome, "%s/%s:%s",
DDUSER, client->username,
DDPATH);

22
japanese/canna-lib/files/patch-af Normal file
View File

@ -0,0 +1,22 @@
--- server/misc.c~ Fri Jul 29 12:03:54 1994
+++ server/misc.c Fri Jun 30 10:16:39 2000
@@ -788,12 +788,19 @@
if (client->username && client->username[0]) {
if (client->groupname && client->groupname[0]) {
+ if (strlen(DDUSER) + strlen(client->username) +
+ strlen(DDGROUP) + strlen(client->groupname) +
+ strlen(DDPATH) >= 256)
+ return ( -1 );
sprintf(dichome, "%s/%s:%s/%s:%s",
DDUSER, client->username,
DDGROUP, client->groupname,
DDPATH);
}
else {
+ if (strlen(DDUSER) + strlen(client->username) +
+ strlen(DDPATH) >= 256)
+ return ( -1 );
sprintf(dichome, "%s/%s:%s",
DDUSER, client->username,
DDPATH);

22
japanese/canna-server/files/patch-af Normal file
View File

@ -0,0 +1,22 @@
--- server/misc.c~ Fri Jul 29 12:03:54 1994
+++ server/misc.c Fri Jun 30 10:16:39 2000
@@ -788,12 +788,19 @@
if (client->username && client->username[0]) {
if (client->groupname && client->groupname[0]) {
+ if (strlen(DDUSER) + strlen(client->username) +
+ strlen(DDGROUP) + strlen(client->groupname) +
+ strlen(DDPATH) >= 256)
+ return ( -1 );
sprintf(dichome, "%s/%s:%s/%s:%s",
DDUSER, client->username,
DDGROUP, client->groupname,
DDPATH);
}
else {
+ if (strlen(DDUSER) + strlen(client->username) +
+ strlen(DDPATH) >= 256)
+ return ( -1 );
sprintf(dichome, "%s/%s:%s",
DDUSER, client->username,
DDPATH);