d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Protect from stack overrun via /etc/ttys, which could possibly allow a

Browse Source 
root user to change the securelevel. Pointed out by Thomas H. Ptacek
<tqbf@enteract.com>.
This commit is contained in:
dg 1997-02-19 08:04:58 +00:00
parent ebf34cb494
commit d71873490f
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
sbin/init/init.c
View File

@ -1089,7 +1089,7 @@ start_window_system(sp)
if (sp->se_type) {
/* Don't use malloc after fork */
strcpy(term, "TERM=");
strcat(term, sp->se_type);
strncat(term, sp->se_type, sizeof(term) - 6);
env[0] = term;
env[1] = 0;
}
@ -1154,7 +1154,7 @@ start_getty(sp)
if (sp->se_type) {
/* Don't use malloc after fork */
strcpy(term, "TERM=");
strcat(term, sp->se_type);
strncat(term, sp->se_type, sizeof(term) - 6);
env[0] = term;
env[1] = 0;
}