2f5c7e19e3
Fix security hole bug for KILL/KILL9 function. Under specific condition, kill(2) would be called with its first arguement (pid) 0 or 1. It would cause killing parent process, inetd(8). The bug was fixed as bellow. * Avoid using atoi(3). * More strict error checking with sscanf(3).
13 lines
407 B
Text
13 lines
407 B
Text
$NetBSD: patch-av,v 1.2 2001/12/21 03:55:13 taca Exp $
|
|
|
|
--- yatd/fldr_etc.c.orig Wed Dec 19 23:08:04 2001
|
|
+++ yatd/fldr_etc.c Fri Dec 21 00:36:45 2001
|
|
@@ -275,7 +275,7 @@
|
|
}
|
|
|
|
#ifdef DEBUG_LOCAL
|
|
- LogDEBUG("<<<Summary: %.256s %u %u %u",
|
|
+ LogDEBUG("<<<Summary: %.256s %ld %d %d",
|
|
FldrSummary.szName, FldrSummary.mtime,
|
|
FldrSummary.nMail, FldrSummary.nMailUnseen);
|
|
#endif
|