From owner-cvs-all  Sun Feb 25 13:14:43 2001
Delivered-To: cvs-all@freebsd.org
Received: from obsecurity.dyndns.org (adsl-63-207-60-10.dsl.lsan03.pacbell.net [63.207.60.10])
	by hub.freebsd.org (Postfix) with ESMTP
	id C0D9A37B491; Sun, 25 Feb 2001 13:14:35 -0800 (PST)
	(envelope-from kris@obsecurity.org)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 9A3B466F83; Sun, 25 Feb 2001 13:14:35 -0800 (PST)
Date: Sun, 25 Feb 2001 13:14:35 -0800
From: Kris Kennaway <kris@obsecurity.org>
To: Gary Jennejohn <gj@FreeBSD.org>
Cc: cvs-all@FreeBSD.org, cvs-committers@FreeBSD.org
Subject: Re: cvs commit: src/usr.sbin/pccard/pccardd util.c
Message-ID: <20010225131435.A39340@mollari.cthul.hu>
References: <200102251952.f1PJqhe95166@freefall.freebsd.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="mYCpIKhGyMATD0i+"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <200102251952.f1PJqhe95166@freefall.freebsd.org>; from gj@FreeBSD.org on Sun, Feb 25, 2001 at 11:52:43AM -0800
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG


--mYCpIKhGyMATD0i+
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Feb 25, 2001 at 11:52:43AM -0800, Gary Jennejohn wrote:
> gj          2001/02/25 11:52:43 PST
>=20
>   Modified files:
>     usr.sbin/pccard/pccardd util.c=20
>   Log:
>   Use vsnprintf in logmsg() to avoid overflowing the array on the stack.
>   The problem was noted with an older model 3Com 3C589 which seems
>   to return more than 256 bytes of data.

Hehe..security vulnerability by malicious pccard? :-)

Kris

--mYCpIKhGyMATD0i+
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE6mXW7Wry0BWjoQKURAnQqAJ9Rhk4ATrCw9jWBPv8A7JWqbnVScACeIkuc
7VTWbosk0BjtqYl9bacNmis=
=xfr/
-----END PGP SIGNATURE-----

--mYCpIKhGyMATD0i+--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message