From owner-cvs-all  Sun Aug 12 10:54:55 2001
Delivered-To: cvs-all@freebsd.org
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id 7F2B737B409; Sun, 12 Aug 2001 10:54:49 -0700 (PDT)
	(envelope-from mike@FreeBSD.org)
Received: (from mike@localhost)
	by freefall.freebsd.org (8.11.4/8.11.4) id f7CHsnG88701;
	Sun, 12 Aug 2001 10:54:49 -0700 (PDT)
	(envelope-from mike)
Message-Id: <200108121754.f7CHsnG88701@freefall.freebsd.org>
From: Mike Barcroft <mike@FreeBSD.org>
Date: Sun, 12 Aug 2001 10:54:49 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/usr.bin/login login.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

mike        2001/08/12 10:54:49 PDT

  Modified files:
    usr.bin/login        login.c 
  Log:
  o Replace occurrences of strncpy(3) with strlcpy(3); most of
    the uses of it were wrong anyway.
  o Always check for NULL returns on strdup(3).
  o Fix a possible buffer overflow in strcpy(3).
  o Fix a format string vulnerability.
  o t->ty_type in stypeof() could be NULL and eventually cause
    a segmentation fault in setenv(3), so check for that.
  
  Eyeballed by:	kris
  Reviewed by:	murray
  MFC after:	3 days
  
  Revision  Changes    Path
  1.66      +48 -24    src/usr.bin/login/login.c


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message