#88 qmailadmin cgi killed by gcc-hardened

[neta]

Hello.

I've been experiencing problems using qmailadmin with ezmlm-idx on a Linux system (using gcc hardened profile).
The qmailadmin cgi kept being killed by hardened constraints.

The problem turned out to be a write past the end of buffer.

The following patch happened to make the problem go away.
I think this may be related to mlists with long names.

--- mailinglist.c.orig 2005-10-23 20:52:34.000000000 +0200
+++ mailinglist.c 2010-05-30 22:09:57.000000000 +0200
@@ -410,9 +410,9 @@
char *arguments[MAX_BUFF];
int argc;
int i=0;
- char tmp[64];
+ char tmp[640];
char *tmpstr;
- char loop_ch[64];
+ char loop_ch[640];
int loop;

/* Initialize listopt to be a string of the characters A-Z, with each one

[neta]

I forgot to mention, it's qmailadmin-1.2.10.