-
Reference also ttylog patch (SF) 2890964.
2009-11-02 22:15:57 UTC in ttylog - a serial port logger
-
Reference also http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=553945.
2009-11-02 22:14:25 UTC in ttylog - a serial port logger
-
--- ttylog.c.orig 2009-11-02 11:09:39.000000000 +0000
+++ ttylog.c 2009-11-02 11:10:25.000000000 +0000
@@ -79,7 +79,9 @@
{
if (argv[i + 1] != NULL)
{
- strcpy (modem_device, argv[i + 1]);
+ memset( modem_device, '\0', sizeof(modem_device));
+ strncpy (modem_device, argv[i + 1],sizeof(modem_device)-1);
+
}
else
{.
2009-11-02 22:13:55 UTC in ttylog - a serial port logger
-
The program uses strcpy to copy the specified device name into a fixed buffer.
This program isn't a security-sensitive one so the issue is minor, but the bug should be fixed:
skx@gold:$ /usr/sbin/ttylog -d `perl -e 'print "X"x3000'`
Segmentation fault
Patch included to turn this into:
(139) skx@gold:/tmp/foo/ttylog-0.1.c$ ./ttylog -d `perl -e 'print
"X"x3000'`
./ttylog:
2009-11-02 22:05:00 UTC in ttylog - a serial port logger
-
jame made 2 file-release changes.
2009-11-01 16:34:02 UTC in FTN Applications
-
jame made 1 file-release changes.
2009-11-01 16:21:01 UTC in FTN Applications
-
jame made 1 file-release changes.
2009-11-01 16:20:01 UTC in FTN Applications
-
jame made 2 file-release changes.
2009-11-01 16:13:06 UTC in FTN Applications
-
jame committed revision 66 to the FTN Applications SVN repository, changing 1 files.
2009-10-27 21:38:50 UTC in FTN Applications
-
jame committed revision 65 to the FTN Applications SVN repository, changing 1 files.
2009-10-27 21:35:55 UTC in FTN Applications
