Date: Thu, 16 Aug 2001 23:25:38 -0700 (PDT) From: Mike Barcroft <mike@FreeBSD.org> To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/usr.bin/login login.c Message-ID: <200108170625.f7H6PcL68326@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
mike 2001/08/16 23:25:38 PDT
Modified files: (Branch: RELENG_4)
usr.bin/login login.c
Log:
MFC Rev 1.66:
o Replace occurrences of strncpy(3) with strlcpy(3); most of
the uses of it were wrong anyway.
o Always check for NULL returns on strdup(3).
o Fix a possible buffer overflow in strcpy(3).
o Fix a format string vulnerability.
o t->ty_type in stypeof() could be NULL and eventually cause
a segmentation fault in setenv(3), so check for that.
MFC Rev 1.67:
Fix some bogus strncpy(3) to strlcpy(3) changes I made in the previous
revision. <utmp.h> structures don't leave room for a NUL character.
Also fix "UNKNOWN" which should have just been UNKNOWN.
Approved by: murray
Revision Changes Path
1.51.2.12 +43 -19 src/usr.bin/login/login.c
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200108170625.f7H6PcL68326>