From owner-freebsd-bugs Sat Jul 26 08:00:06 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.5/8.8.5) id IAA02815 for bugs-outgoing; Sat, 26 Jul 1997 08:00:06 -0700 (PDT) Received: (from gnats@localhost) by hub.freebsd.org (8.8.5/8.8.5) id IAA02806; Sat, 26 Jul 1997 08:00:03 -0700 (PDT) Resent-Date: Sat, 26 Jul 1997 08:00:03 -0700 (PDT) Resent-Message-Id: <199707261500.IAA02806@hub.freebsd.org> Resent-From: gnats (GNATS Management) Resent-To: freebsd-bugs Resent-Reply-To: FreeBSD-gnats@FreeBSD.ORG, Harlan Stenn Received: from pcpsj.pfcs.com (AlgoQDtLzETnci0gbz1eerIRvm2c0SAF@harlan.fred.net [205.252.219.31]) by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id HAA02566 for ; Sat, 26 Jul 1997 07:50:47 -0700 (PDT) Received: from mumps.pfcs.com (mumps.pfcs.com [192.52.69.11]) by pcpsj.pfcs.com (8.8.6/8.6.9) with SMTP id KAA20188 for ; Sat, 26 Jul 1997 10:50:36 -0400 (EDT) Received: from brown.pfcs.com by mumps.pfcs.com with SMTP id AA02639 (5.67b/IDA-1.5 for ); Sat, 26 Jul 1997 10:49:35 -0400 Received: (harlan@localhost) by brown.pfcs.com (8.8.6/8.6.9) id KAA25203; Sat, 26 Jul 1997 10:50:34 -0400 (EDT) Message-Id: <199707261450.KAA25203@brown.pfcs.com> Date: Sat, 26 Jul 1997 10:50:34 -0400 (EDT) From: Harlan Stenn To: FreeBSD-gnats-submit@FreeBSD.ORG X-Send-Pr-Version: 3.2 Subject: bin/4170: fencepost error in more... Sender: owner-freebsd-bugs@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk >Number: 4170 >Category: bin >Synopsis: fencepost error in more... >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-bugs >State: open >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sat Jul 26 08:00:02 PDT 1997 >Last-Modified: >Originator: Harlan Stenn >Organization: >Release: FreeBSD 2.2-STABLE i386 >Environment: >Description: more/main.c writes data past the end of an array. Check out the code fragment after getenv("MORE"). >How-To-Repeat: Inspection. >Fix: --- usr.bin/more/main.c- Wed May 7 01:24:36 1997 +++ usr.bin/more/main.c Sat Jul 26 10:14:43 1997 @@ -252,7 +252,7 @@ char **argv; { int envargc, argcnt; - char *envargv[2]; + char *envargv[3]; (void) setlocale(LC_ALL, ""); >Audit-Trail: >Unformatted: