From owner-cvs-all  Mon Oct 30 21:29:57 2000
Delivered-To: cvs-all@freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id 2A59337B479; Mon, 30 Oct 2000 21:29:55 -0800 (PST)
Received: (from kris@localhost)
	by freefall.freebsd.org (8.9.3/8.9.2) id VAA41275;
	Mon, 30 Oct 2000 21:29:55 -0800 (PST)
	(envelope-from kris@FreeBSD.org)
Message-Id: <200010310529.VAA41275@freefall.freebsd.org>
From: Kris Kennaway <kris@FreeBSD.org>
Date: Mon, 30 Oct 2000 21:29:54 -0800 (PST)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/libexec/telnetd sys_term.c telnetd.c utility.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

kris        2000/10/30 21:29:54 PST

  Modified files:
    libexec/telnetd      sys_term.c telnetd.c utility.c 
  Log:
  Filter out some more magic environment variables used by libraries linked
  with telnetd. This should really be done with a positive filter - i.e.
  only allow through a configured list of variables.
  
  Also do some buffer-safety cleanups while I'm here - I don't think these
  are exploitable.
  
  Revision  Changes    Path
  1.25      +8 -1      src/libexec/telnetd/sys_term.c
  1.23      +3 -3      src/libexec/telnetd/telnetd.c
  1.14      +3 -3      src/libexec/telnetd/utility.c



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message