1
0
mirror of https://git.FreeBSD.org/ports.git synced 2024-11-01 22:05:08 +00:00
freebsd-ports/japanese/canna-lib/files/patch-af
Jun Kuriyama 6366da8219 Fix remote buffer overflow vulnerability.
References:	SPSadvisory#38
		http://shadowpenguin.backsection.net/advisories/advisory038.html
		(Japanese only)
		http://shadowpenguin.backsection.net/advisories/index.html
		(English abstract included)

Max, should we use "canna" UID for sandbox'ing?
2000-06-30 01:47:44 +00:00

23 lines
671 B
Plaintext

--- server/misc.c~ Fri Jul 29 12:03:54 1994
+++ server/misc.c Fri Jun 30 10:16:39 2000
@@ -788,12 +788,19 @@
if (client->username && client->username[0]) {
if (client->groupname && client->groupname[0]) {
+ if (strlen(DDUSER) + strlen(client->username) +
+ strlen(DDGROUP) + strlen(client->groupname) +
+ strlen(DDPATH) >= 256)
+ return ( -1 );
sprintf(dichome, "%s/%s:%s/%s:%s",
DDUSER, client->username,
DDGROUP, client->groupname,
DDPATH);
}
else {
+ if (strlen(DDUSER) + strlen(client->username) +
+ strlen(DDPATH) >= 256)
+ return ( -1 );
sprintf(dichome, "%s/%s:%s",
DDUSER, client->username,
DDPATH);