diff options
| author | ache <ache@FreeBSD.org> | 2000-06-14 23:37:56 +0800 |
|---|---|---|
| committer | ache <ache@FreeBSD.org> | 2000-06-14 23:37:56 +0800 |
| commit | 74db8e5d6eefd24de7a1ab3944a42d11c6f21d88 (patch) | |
| tree | 1c5d4b584cef73f7fd4a4b8e7a034c957ef015fb | |
| parent | 3131b9b21e7b52d2fb0d51d4dc544ddeb03f0ba9 (diff) | |
| download | freebsd-ports-gnome-74db8e5d6eefd24de7a1ab3944a42d11c6f21d88.tar.gz freebsd-ports-gnome-74db8e5d6eefd24de7a1ab3944a42d11c6f21d88.tar.zst freebsd-ports-gnome-74db8e5d6eefd24de7a1ab3944a42d11c6f21d88.zip | |
Use snprintf to prevent non-exploitable in real life overflow
Submitted by: Jun Kuriyama <kuriyama@FreeBSD.org>
| -rw-r--r-- | ftp/wu-ftpd+ipv6/files/patch-aa | 18 | ||||
| -rw-r--r-- | ftp/wu-ftpd/files/patch-aa | 18 |
2 files changed, 28 insertions, 8 deletions
diff --git a/ftp/wu-ftpd+ipv6/files/patch-aa b/ftp/wu-ftpd+ipv6/files/patch-aa index 339533ff98ed..d368db5c6edf 100644 --- a/ftp/wu-ftpd+ipv6/files/patch-aa +++ b/ftp/wu-ftpd+ipv6/files/patch-aa @@ -1,5 +1,17 @@ ---- src/ftpd.c.orig Tue Jan 18 19:35:30 2000 -+++ src/ftpd.c Tue Jan 18 19:38:50 2000 +--- src/ftpd.c.orig Thu Oct 14 23:41:47 1999 ++++ src/ftpd.c Wed Jun 14 14:48:27 2000 +@@ -1602,9 +1602,9 @@ + /* Display s/key challenge where appropriate. */ + + if (pwd == NULL || skeychallenge(&skey, pwd->pw_name, sbuf)) +- sprintf(buf, "Password required for %s.", name); ++ snprintf(buf, 128, "Password required for %s.", name); + else +- sprintf(buf, "%s %s for %s.", sbuf, ++ snprintf(buf, 128, "%s %s for %s.", sbuf, + pwok ? "allowed" : "required", name); + return (buf); + } @@ -6346,7 +6346,6 @@ } goto globfree; @@ -16,5 +28,3 @@ } if (dout != NULL) { - - diff --git a/ftp/wu-ftpd/files/patch-aa b/ftp/wu-ftpd/files/patch-aa index 339533ff98ed..d368db5c6edf 100644 --- a/ftp/wu-ftpd/files/patch-aa +++ b/ftp/wu-ftpd/files/patch-aa @@ -1,5 +1,17 @@ ---- src/ftpd.c.orig Tue Jan 18 19:35:30 2000 -+++ src/ftpd.c Tue Jan 18 19:38:50 2000 +--- src/ftpd.c.orig Thu Oct 14 23:41:47 1999 ++++ src/ftpd.c Wed Jun 14 14:48:27 2000 +@@ -1602,9 +1602,9 @@ + /* Display s/key challenge where appropriate. */ + + if (pwd == NULL || skeychallenge(&skey, pwd->pw_name, sbuf)) +- sprintf(buf, "Password required for %s.", name); ++ snprintf(buf, 128, "Password required for %s.", name); + else +- sprintf(buf, "%s %s for %s.", sbuf, ++ snprintf(buf, 128, "%s %s for %s.", sbuf, + pwok ? "allowed" : "required", name); + return (buf); + } @@ -6346,7 +6346,6 @@ } goto globfree; @@ -16,5 +28,3 @@ } if (dout != NULL) { - - |