From owner-cvs-lib  Tue Sep  5 12:54:30 1995
Return-Path: cvs-lib-owner
Received: (from majordom@localhost)
          by freefall.freebsd.org (8.6.11/8.6.6) id MAA02484
          for cvs-lib-outgoing; Tue, 5 Sep 1995 12:54:30 -0700
Received: (from wpaul@localhost)
          by freefall.freebsd.org (8.6.11/8.6.6) id MAA02396
          ; Tue, 5 Sep 1995 12:53:01 -0700
Date: Tue, 5 Sep 1995 12:53:01 -0700
From: Bill Paul <wpaul>
Message-Id: <199509051953.MAA02396@freefall.freebsd.org>
To: CVS-commiters, cvs-lib
Subject: cvs commit: src/lib/libc/gen getpwent.c getgrent.c
Sender: cvs-lib-owner@FreeBSD.org
Precedence: bulk

wpaul       95/09/05 12:53:01

  Modified:    lib/libc/gen  getpwent.c getgrent.c
  Log:
  getgrent.c: adjust _nextypgroup() slightly so that it continues processing
  the group map after encountering a badly formatted entry.
  
  getpwent.c: same as above for _nextyppass(), and also turn a couple of
  sprintf()s into snprintf()s to avoid potential buffer overruns. (The
  other day I nearly went mad because of a username in my NIS database
  that's actually 9 characters long instead of 8. Stuffing a 9-character
  username into an 8-character buffer can do some strange things.)
  
  (This reminds me: I hope somebody's planning to fix the buffer overrun
  security hole in syslog(3) before 2.1 ships.)