Ruslan Ermilov 40e7fc1a20 More potential buffer overflow fixes. ... o Fixed `nfrontp' calculations in output_data(). If `remaining' is initially zero, it was possible for `nfrontp' to be decremented. Noticed by: dillon o Replaced leaking writenet() with output_datalen(): : * writenet : * : * Just a handy little function to write a bit of raw data to the net. : * It will force a transmit of the buffer if necessary : * : * arguments : * ptr - A pointer to a character string to write : * len - How many bytes to write : */ : void : writenet(ptr, len) : register unsigned char *ptr; : register int len; : { : /* flush buffer if no room for new data) */ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ : if ((&netobuf[BUFSIZ] - nfrontp) < len) { : /* if this fails, don't worry, buffer is a little big */ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ : netflush(); : } : : memmove(nfrontp, ptr, len); : nfrontp += len; : : } /* end of writenet */ What an irony! :-) o Optimized output_datalen() a bit.		2001-07-20 12:02:30 +00:00
..
arpa	Fix typo: compatability -> compatibility.	2001-02-06 12:05:58 +00:00
libtelnet	Make the PAM user-override actually override the correect thing.	2001-05-17 16:28:11 +00:00
telnet	mdoc(7) police: removed HISTORY info from the .Os call.	2001-07-10 10:42:19 +00:00
telnetd	More potential buffer overflow fixes.	2001-07-20 12:02:30 +00:00