From owner-cvs-all  Sun Feb 25 13:17:53 2001
Delivered-To: cvs-all@freebsd.org
Received: from mailout02.sul.t-online.com (mailout02.sul.t-online.com [194.25.134.17])
	by hub.freebsd.org (Postfix) with ESMTP
	id 3FA5837B4EC; Sun, 25 Feb 2001 13:17:42 -0800 (PST)
	(envelope-from garyj@peedub.muc.de)
Received: from fwd02.sul.t-online.com 
	by mailout02.sul.t-online.com with smtp 
	id 14X8Xx-0003p5-03; Sun, 25 Feb 2001 22:17:37 +0100
Received: from peedub.muc.de (320038014727-0001@[62.226.149.92]) by fmrl02.sul.t-online.com
	with esmtp id 14X8Xl-0x3OCWC; Sun, 25 Feb 2001 22:17:25 +0100
Received: from peedub.muc.de (localhost [127.0.0.1])
	by peedub.muc.de (8.11.2/8.11.1) with ESMTP id f1PMHFu01759;
	Sun, 25 Feb 2001 23:17:16 +0100 (CET)
	(envelope-from garyj@peedub.muc.de)
Message-Id: <200102252217.f1PMHFu01759@peedub.muc.de>
To: Kris Kennaway <kris@obsecurity.org>
Cc: cvs-all@FreeBSD.org, cvs-committers@FreeBSD.org
Subject: Re: cvs commit: src/usr.sbin/pccard/pccardd util.c 
Reply-To: Gary Jennejohn <garyj@muc.de>
In-reply-to: Your message of "Sun, 25 Feb 2001 13:14:35 PST."
             <20010225131435.A39340@mollari.cthul.hu> 
Date: Sun, 25 Feb 2001 23:17:15 +0100
From: Gary Jennejohn <garyj@peedub.muc.de>
X-Sender: 320038014727-0001@t-dialin.net
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Kris Kennaway writes:
> 
> On Sun, Feb 25, 2001 at 11:52:43AM -0800, Gary Jennejohn wrote:
> > gj          2001/02/25 11:52:43 PST
> >=20
> >   Modified files:
> >     usr.sbin/pccard/pccardd util.c=20
> >   Log:
> >   Use vsnprintf in logmsg() to avoid overflowing the array on the stack.
> >   The problem was noted with an older model 3Com 3C589 which seems
> >   to return more than 256 bytes of data.
> 
> Hehe..security vulnerability by malicious pccard? :-)
> 
> Kris
> 

no, malicious core dumps :)

---
Gary Jennejohn / garyj@muc.de gj@freebsd.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message