tags 377630 + patch upstream
kthxbye

The problem here is an extra semicolon.  The semicolon at the end of
line 55 makes i==MAXSIG.  Then, on line 56, signames[MAXSIG] is set to
zero, which causes a segfault.  That this only happens on powerpc is
probably due to a code size fluke or something similar; regardless, the
code is invalid on all platforms.

A patch is attached to fix this problem.  I tagged the bug "upstream"
because in all likelihood, this is an upstream problem as well.  It may
also occur in programs derived from ircii; these should be easy to spot,
since there's a set of security bugs going around right now.

-- 
brian m. carlson / brian with sandals: Houston, Texas, US
+1 713 440 7475 | http://crustytoothpaste.ath.cx/~bmc | My opinion only
OpenPGP: RSA v4 4096b 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187
--- ircii.old/source/mksiginc.c	2004-02-16 17:20:10.000000000 +0000
+++ ircii-20051015/source/mksiginc.c	2007-08-15 04:53:02.000000000 +0000
@@ -52,7 +52,7 @@
 	int i;
 
 	signames[0] = "ZERO";
-	for (i = 1; i < MAXSIG; i++);
+	for (i = 1; i < MAXSIG; i++)
 		signames[i] = 0;
 
 #ifdef SIGABRT

Attachment: signature.asc
Description: Digital signature

Reply via email to