I've had a look at the situation with 222324, and the request for a
--wide option:

I agree that such an option would be a good thing and ought to be
provided.  However, it is far from clear how to do it in a
clearly-correct way with the current codebase.

The current code in netstat is a hopeless morass of C string-twiddling
and fixed-length buffers, and simply going through and adding new
cases to it - particularly, adding arrangements to avoid truncation -
seems very dangerous to me.

It would be easier to rewrite most of that code than to review for
correctness an attempt like Olaf's patch.  And that review is
essential because this is really difficult to get right and any
mistake is likely to produce a buffer overflow vulnerability.

Also, of course, any --wide option ought to guarantee never to
truncate anything, not just some particular cases.

Ian.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to