From owner-cvs-src Mon Mar 17 13:35:11 2003 Delivered-To: cvs-src@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D07E437B401; Mon, 17 Mar 2003 13:35:08 -0800 (PST) Received: from gw.nectar.cc (gw.nectar.cc [208.42.49.153]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5629243F85; Mon, 17 Mar 2003 13:35:07 -0800 (PST) (envelope-from nectar@nectar.cc) Received: by gw.nectar.cc (Postfix, from userid 1001) id 3F4CEE; Mon, 17 Mar 2003 15:35:06 -0600 (CST) Date: Mon, 17 Mar 2003 15:35:06 -0600 From: "Jacques A. Vidrine" To: Eivind Eklund Cc: security-officer@freebsd.org, Jean-Marc Zucconi , src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/lib/libz gzio.c Message-ID: <20030317213506.GA58242@hellblazer.celabo.org> References: <200303140147.h2E1l11r023091@repoman.freebsd.org> <20030314044434.B42430@FreeBSD.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20030314044434.B42430@FreeBSD.org> User-Agent: Mutt/1.3.27i X-Url: http://www.celabo.org/ Sender: owner-cvs-src@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Fri, Mar 14, 2003 at 04:44:34AM -0800, Eivind Eklund wrote: > On Thu, Mar 13, 2003 at 05:47:01PM -0800, Jean-Marc Zucconi wrote: > > jmz 2003/03/13 17:47:01 PST > > > > FreeBSD src repository > > > > Modified files: > > lib/libz gzio.c > > Log: > > In src/lib/libz/gzio.c the function gzprintf does not check if the > > amount of bytes (supposed to be) written by vsnprintf exceeds the > > size of the buffer. > > > > PR: bin/48844 > > Submitted by: Peter A Jonsson > > Obtained from: OpenBSD > > MFC after: 1 month > > Are we sure this does not have security implications and should be merged > ASAP? It sounds like a security fix, and one I'd like to have in 4.8 - if > gunzipping files can be exploited, it could turn nasty. IIRC, there are no uses of gzprintf in FreeBSD. Maybe Chris can dig up my correspondance about this on security-officer; or I'll dig it up in a few days. Cheers, -- Jacques A. Vidrine http://www.celabo.org/ NTT/Verio SME . FreeBSD UNIX . Heimdal Kerberos jvidrine@verio.net . nectar@FreeBSD.org . nectar@kth.se To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-src" in the body of the message