From owner-freebsd-audit  Wed Feb  6 17:44:46 2002
Delivered-To: freebsd-audit@freebsd.org
Received: from descent.robbins.dropbear.id.au (228.c.010.mel.iprimus.net.au [210.50.202.228])
	by hub.freebsd.org (Postfix) with ESMTP id 734C837B404
	for <audit@FreeBSD.ORG>; Wed,  6 Feb 2002 17:44:33 -0800 (PST)
Received: (from tim@localhost)
	by descent.robbins.dropbear.id.au (8.11.6/8.11.6) id g171eqa01285;
	Thu, 7 Feb 2002 12:40:52 +1100 (EST)
	(envelope-from tim)
Date: Thu, 7 Feb 2002 12:40:52 +1100
From: "Tim J. Robbins" <tim@robbins.dropbear.id.au>
To: "Tim J. Robbins" <tim@robbins.dropbear.id.au>
Cc: audit@FreeBSD.ORG
Subject: Re: tmpfile() libc call causes buffer overflow?
Message-ID: <20020207124052.A1271@descent.robbins.dropbear.id.au>
References: <20020207010159.EFLX12982.out008.verizon.net@there> <20020207123527.B425@descent.robbins.dropbear.id.au>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
In-Reply-To: <20020207123527.B425@descent.robbins.dropbear.id.au>; from tim@robbins.dropbear.id.au on Thu, Feb 07, 2002 at 12:35:27PM +1100
Sender: owner-freebsd-audit@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-audit.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-audit>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-audit>
X-Loop: FreeBSD.ORG

On Thu, Feb 07, 2002 at 12:35:27PM +1100, Tim J. Robbins wrote:

> This is a bug in pr. Its usage() function writes to `err', which is NULL

I should point out that flsh_errs() also needs to be corrected.


Tim

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-audit" in the body of the message