Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 16 Mar 2001 14:50:03 +0300 (MSK)
From:      yar@comp.chem.msu.su
To:        FreeBSD-gnats-submit@freebsd.org
Cc:        mitsuru@riken.go.jp
Subject:   ports/25852: www/tinyproxy has a bug that has to be fixed in the port
Message-ID:  <200103161150.f2GBo3U61443@ddt.demos.su>

next in thread | raw e-mail | index | archive | help

>Number:         25852
>Category:       ports
>Synopsis:       www/tinyproxy has a bug that has to be fixed in the port
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Fri Mar 16 04:00:02 PST 2001
>Closed-Date:
>Last-Modified:
>Originator:     Yar Tikhiy <yar@comp.chem.msu.su>
>Release:        FreeBSD 4.1.1-STABLE i386
>Organization:
Moscow State University
>Environment:

	FreeBSD ddt.demos.su 4.1.1-STABLE FreeBSD 4.1.1-STABLE #0: Wed Oct 18 14:43:46 MSD 2000     root@:/mnt/src/sys/compile/DDT1  i386

>Description:

	The ``tinyproxy'' program (corresponding port: www/tinyproxy),
	as of version 1.3.3a, has a bug in its code that has to do
	with dereferencing an uninitialized (and NULL) pointer.
	The program is being developed without a stable branch, so
	the bug was fixed in development versions only. Hence it seems
	reasonable to include a fix for the bug in the port of the
	stable version of tinyproxy.

>How-To-Repeat:

	Run tinyproxy with the ``-n'' option (limit access to
	the proxy to a particular IP network) and see it crash on
	the very first connection from an unauthorized address.

>Fix:

Add the following fix to the corresponding port:

--- src/reqs.c.orig	Sat Apr  1 02:55:22 2000
+++ src/reqs.c	Mon Mar 12 17:48:08 2001
@@ -841,7 +841,7 @@
 
 	/* Check to see if there are new connections pending */
 	if (FD_ISSET(setup_fd, &readfds) && (fd = listen_sock()) >= 0) {
-		new_conn(fd);	/* make a connection from the FD */
+		connptr = new_conn(fd);	/* make a connection from the FD */
 
 		if (validuser(fd)) {
 			if (config.cutoffload && (load > config.cutoffload)) {
>Release-Note:
>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200103161150.f2GBo3U61443>