HomeFreeBSD

Limit the risk of `buf' overrun in ping.c when printing hostnames.
rS17320Unpublished

Unpublished Commit ยท Learn More

No further details are available.

Description

Limit the risk of `buf' overrun in ping.c when printing hostnames.

Note, this is not really a security risk, because the buffer in question
is a static variable in the data segment and not on the stack, and hence
cannot subert the flow of execution in any way. About the worst case was
that if you pinged a long hostname, ping could coredump.

Pointed out on: bugtraq (listserv@netspace.org)

Details

Provenance
peterAuthored on
Parents
rS17319: Fix some of the problems that bde pointed out to me some time ago.
Branches
Unknown
Tags
Unknown

Event Timeline