Re: [ache@FreeBSD.org: cvs commit: src/lib/libc/locale setlocale.c]

From: Mike Tancsa (mike@sentex.net)
Date: 08/02/02


Date: Fri, 02 Aug 2002 11:36:35 -0400
To: "Andrey A. Chernov" <ache@nagual.pp.ru>, security@FreeBSD.ORG
From: Mike Tancsa <mike@sentex.net>


Hi,
         Was this still going to be MFC'd ?

         ---Mike

At 05:12 AM 02/08/2002 +0400, Andrey A. Chernov wrote:
>Please fill security advisory for this fix (first part). That original BSD
>code bug can be exploitable.
>
>----- Forwarded message from "Andrey A. Chernov" <ache@FreeBSD.org> -----
>
>Date: Thu, 1 Aug 2002 18:04:49 -0700 (PDT)
>From: "Andrey A. Chernov" <ache@FreeBSD.org>
>Subject: cvs commit: src/lib/libc/locale setlocale.c
>To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
>
>ache 2002/08/01 18:04:49 PDT
>
> Modified files:
> lib/libc/locale setlocale.c
> Log:
> Prevent out of bounds writting for too many slashes case.
> Replace strnpy + ='\0' with strlcpy
>
> MFC after: 1 day
>
> Revision Changes Path
> 1.35 +10 -14 src/lib/libc/locale/setlocale.c
>
>----- End forwarded message -----
>
>--
>Andrey A. Chernov
>http://ache.pp.ru/
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-security" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message