Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 21 Sep 2000 08:10:25 +0200
From:      Mark Murray <mark@grondar.za>
To:        Warner Losh <imp@FreeBSD.org>
Cc:        cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/usr.bin/telnet telnet.c 
Message-ID:  <200009210610.e8L6APn03681@grimreaper.grondar.za>
In-Reply-To: <200009202307.QAA62881@freefall.freebsd.org> ; from Warner Losh <imp@FreeBSD.org>  "Wed, 20 Sep 2000 16:07:04 MST."
References:  <200009202307.QAA62881@freefall.freebsd.org> 

next in thread | previous in thread | raw e-mail | index | archive | help
Crypto version also, please!

M
> imp         2000/09/20 16:07:04 PDT
> 
>   Modified files:
>     usr.bin/telnet       telnet.c 
>   Log:
>   Fix buffer overflow when DISPLAY is longer than 43 characters.  This
>   is not exploitable because telnet doesn't run with elevated privs.
>   
>   Didn't fix all the other potential buffer overflows.  Would be a good
>   task for someone who has lots of time to carefully study each case
>   because cut and paste solutions are dangerous for this code base.
>   
>   Added $FreeBSD$ in the same way that command.c did it.
>   
>   Revision  Changes    Path
>   1.9       +7 -4      src/usr.bin/telnet/telnet.c
> 
> 
> 
--
Mark Murray
Join the anti-SPAM movement: http://www.cauce.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200009210610.e8L6APn03681>