HomeFreeBSD

When telnetd(8) composes argument list for login(1), an unexpected sequence

Description

When telnetd(8) composes argument list for login(1), an unexpected sequence
of memory allocation failures combined with insufficient error checking
could result in the construction and execution of an argument sequence that
was not intended.

Fix that treating malloc(3) failures as fatal condition.

Submitted by: brooks
Security: FreeBSD-SA-16:36.telnetd

Details

Provenance
glebiusAuthored on
Parents
rS309637: Fix possible login(1) argument injection in telnetd(8). [SA-16:36]
Branches
Unknown
Tags
Unknown