d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

where_arge is allocated on stack and return address is overwritten

Browse Source 
by buffer overflow.

Submitted by:	Hidetoshi Shimokawa <simokawa@sat.t.u-tokyo.ac.jp>
This commit is contained in:
Jordan K. Hubbard 1999-06-09 09:29:53 +00:00
parent 85cfadeb74
commit 177bf8278c
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
usr.sbin/pkg_install/add/extract.c
View File

@ -1,6 +1,6 @@
#ifndef lint
static const char rcsid[] =
"$Id: extract.c,v 1.22 1998/10/12 20:01:48 jkh Exp $";
"$Id: extract.c,v 1.23 1998/10/28 22:44:24 jkh Exp $";
#endif
/*
@ -29,8 +29,8 @@ static const char rcsid[] =
#define STARTSTRING "tar cf - "
#define TOOBIG(str) ((strlen(str) + 22 + strlen(home) + where_count > maxargs) \
|| (strlen(str) + 6 + strlen(home) + perm_count > maxargs))
#define TOOBIG(str) ((strlen(str) + FILENAME_MAX + where_count > maxargs) \
|| (strlen(str) + FILENAME_MAX + perm_count > maxargs))
#define PUSHOUT(todir) /* push out string */ \
if (where_count > sizeof(STARTSTRING)-1) { \