openbsd-ports/databases/gnats/patches/patch-gnats_client_c
brad 9e8ecfb2f4 Fix some security issues with gnats.
Some additional fixes from millert@
sprintf -> snprintf
str{cat,cpy} -> strl{cat,cpy}

http://marc.theaimsgroup.com/?l=bugtraq&m=105638591907836&w=2

ok naddy@
2003-08-25 23:33:56 +00:00

13 lines
424 B
Plaintext

$OpenBSD: patch-gnats_client_c,v 1.1 2003/08/25 23:35:06 brad Exp $
--- gnats/client.c.orig Tue Sep 21 17:18:39 1999
+++ gnats/client.c Wed Jul 2 13:23:13 2003
@@ -485,7 +485,7 @@ client_init ()
authenticator, but a constant should be nearly as secure. */
#define CKSUM 0x10291966
- strcpy (hname, host->h_name);
+ strlcpy (hname, host->h_name, sizeof(hname));
realm = krb_realmofhost (hname);