diff options
| author | Andrey A. Chernov <ache@FreeBSD.org> | 2000-06-14 15:37:56 +0000 |
|---|---|---|
| committer | Andrey A. Chernov <ache@FreeBSD.org> | 2000-06-14 15:37:56 +0000 |
| commit | f3e622985b6f1001975f35874dbd6ad7c4b69760 (patch) | |
| tree | 27a66b2bbef0df24ad0881d730ed7d68bc818023 /ftp | |
| parent | fb8742dfb151f34b49714ee9106e8e35f7e969c1 (diff) | |
| download | ports-f3e622985b6f1001975f35874dbd6ad7c4b69760.tar.gz ports-f3e622985b6f1001975f35874dbd6ad7c4b69760.zip | |
Use snprintf to prevent non-exploitable in real life overflow
Submitted by: Jun Kuriyama <kuriyama@FreeBSD.org>
Notes
Notes:
svn path=/head/; revision=29599
Diffstat (limited to 'ftp')
| -rw-r--r-- | ftp/wu-ftpd+ipv6/files/patch-aa | 18 | ||||
| -rw-r--r-- | ftp/wu-ftpd/files/patch-aa | 18 |
2 files changed, 28 insertions, 8 deletions
diff --git a/ftp/wu-ftpd+ipv6/files/patch-aa b/ftp/wu-ftpd+ipv6/files/patch-aa index 339533ff98ed..d368db5c6edf 100644 --- a/ftp/wu-ftpd+ipv6/files/patch-aa +++ b/ftp/wu-ftpd+ipv6/files/patch-aa @@ -1,5 +1,17 @@ ---- src/ftpd.c.orig Tue Jan 18 19:35:30 2000 -+++ src/ftpd.c Tue Jan 18 19:38:50 2000 +--- src/ftpd.c.orig Thu Oct 14 23:41:47 1999 ++++ src/ftpd.c Wed Jun 14 14:48:27 2000 +@@ -1602,9 +1602,9 @@ + /* Display s/key challenge where appropriate. */ + + if (pwd == NULL || skeychallenge(&skey, pwd->pw_name, sbuf)) +- sprintf(buf, "Password required for %s.", name); ++ snprintf(buf, 128, "Password required for %s.", name); + else +- sprintf(buf, "%s %s for %s.", sbuf, ++ snprintf(buf, 128, "%s %s for %s.", sbuf, + pwok ? "allowed" : "required", name); + return (buf); + } @@ -6346,7 +6346,6 @@ } goto globfree; @@ -16,5 +28,3 @@ } if (dout != NULL) { - - diff --git a/ftp/wu-ftpd/files/patch-aa b/ftp/wu-ftpd/files/patch-aa index 339533ff98ed..d368db5c6edf 100644 --- a/ftp/wu-ftpd/files/patch-aa +++ b/ftp/wu-ftpd/files/patch-aa @@ -1,5 +1,17 @@ ---- src/ftpd.c.orig Tue Jan 18 19:35:30 2000 -+++ src/ftpd.c Tue Jan 18 19:38:50 2000 +--- src/ftpd.c.orig Thu Oct 14 23:41:47 1999 ++++ src/ftpd.c Wed Jun 14 14:48:27 2000 +@@ -1602,9 +1602,9 @@ + /* Display s/key challenge where appropriate. */ + + if (pwd == NULL || skeychallenge(&skey, pwd->pw_name, sbuf)) +- sprintf(buf, "Password required for %s.", name); ++ snprintf(buf, 128, "Password required for %s.", name); + else +- sprintf(buf, "%s %s for %s.", sbuf, ++ snprintf(buf, 128, "%s %s for %s.", sbuf, + pwok ? "allowed" : "required", name); + return (buf); + } @@ -6346,7 +6346,6 @@ } goto globfree; @@ -16,5 +28,3 @@ } if (dout != NULL) { - - |