From owner-freebsd-questions Thu Sep 21 21:27:10 2000 Delivered-To: freebsd-questions@freebsd.org Received: from srcso.globis.ru (globis.ru [212.248.80.7]) by hub.freebsd.org (Postfix) with ESMTP id 2C27E37B424 for ; Thu, 21 Sep 2000 21:27:05 -0700 (PDT) Received: from raduga.dyndns.org (raduga.sochi.net [212.248.82.76]) by srcso.globis.ru (8.9.3/8.9.3) with ESMTP id IAA18735 for ; Fri, 22 Sep 2000 08:45:39 +0400 (MSD) (envelope-from igor@raduga.dyndns.org) Received: (from igor@localhost) by raduga.dyndns.org (8.10.0/8.10.0) id e8M4QX301062 for freebsd-questions@FreeBSD.ORG; Fri, 22 Sep 2000 08:26:33 +0400 Date: Fri, 22 Sep 2000 08:26:33 +0400 From: Igor Roboul To: FreeBSD Questions Subject: Re: Default IMAP INBOX to $HOME/Mailbox Message-ID: <20000922082633.B1004@linux.rainbow> Reply-To: igorr@crosswinds.net Mail-Followup-To: FreeBSD Questions References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0pre4i In-Reply-To: ; from troy@psknet.com on Thu, Sep 21, 2000 at 07:54:48PM -0400 X-Operating-System: Linux linux.rainbow 2.2.14-plus-SMP X-Best-Window-Manager: Window Maker (www.windowmaker.org) Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Thu, Sep 21, 2000 at 07:54:48PM -0400, Troy Settle wrote: > char tmp[MAILTMPLEN]; > if (!sysInbox) { /* initialize if first time */ > - sprintf (tmp,"%s/%s",MAILSPOOL,myusername ()); > + sprintf (tmp,"%s/%s",myhomedir(),".mail"); Do we have here potential buffer overflow? maybe we need snprintf(tmp,MAILTMPLEN-1,"%s/%s",myhomedir(),".mail"); ? -- Igor Roboul, Unix System Administrator & Programmer @ sanatorium "Raduga", Sochi, Russia http://www.brainbench.com/transcript.jsp?pid=304744 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message