Patch attached...

-- 
Kees Cook                                            @debian.org
Description: do not crash if an inappropriately long argument is used for -D.
Author: Kees Cook <k...@ubuntu.com>
Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/net-tools/+bug/515010
Bug-Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=569509

Index: net-tools-1.60/arp.c
===================================================================
--- net-tools-1.60.orig/arp.c	2010-02-11 15:19:16.702985736 -0800
+++ net-tools-1.60/arp.c	2010-02-11 15:22:29.729592589 -0800
@@ -243,7 +243,8 @@
     struct ifreq ifr;
     struct hwtype *xhw;
 
-    strcpy(ifr.ifr_name, ifname);
+    strncpy(ifr.ifr_name, ifname, sizeof(ifr.ifr_name));
+    ifr.ifr_name[IFNAMSIZ-1]='\0';
     if (ioctl(sockfd, SIOCGIFHWADDR, &ifr) < 0) {
 	fprintf(stderr, _("arp: cant get HW-Address for `%s': %s.\n"), ifname, strerror(errno));
 	return (-1);

Reply via email to