reassign 357580 firebird2-super-server,libfbembed1 thanks Hi,
Here's a patch that fixes the crash. The fix is rather ugly IMHO, but this is what upstream proposed. Please apply it to stable version of firebird2. Unstable package is due for upload. More information (discovery, reproduction) on http://bugs.debian.org/358580 Thanks, dam -- Damyan Ivanov Creditreform Bulgaria [EMAIL PROTECTED] http://www.creditreform.bg/ phone: +359(2)928-2611, 929-3993 fax: +359(2)920-0994 mob. +359(88)856-6067 [EMAIL PROTECTED]/Gaim
#! /bin/sh /usr/share/dpatch/dpatch-run ## security-remote-preauth-crash.dpatch by <[EMAIL PROTECTED]> ## ## All lines beginning with `## DP:' are a description of the patch. ## DP: No description. @DPATCH@ diff -urNad firebird2-1.5.3.4870~/src/jrd/unix.cpp firebird2-1.5.3.4870/src/jrd/unix.cpp --- firebird2-1.5.3.4870~/src/jrd/unix.cpp 2004-03-29 06:50:11.000000000 +0300 +++ firebird2-1.5.3.4870/src/jrd/unix.cpp 2006-03-20 11:46:53.000000000 +0200 @@ -643,6 +643,8 @@ if (string) { ptr = string; if (length) { + if (length >= sizeof(temp)) length = sizeof(temp) - 1; + MOVE_FAST(string, temp, length); temp[length] = 0; ptr = temp; @@ -651,6 +653,8 @@ else { ptr = file_name; if (file_length) { + if (file_length >= sizeof(temp)) file_length = sizeof(temp) - 1; + MOVE_FAST(file_name, temp, file_length); temp[file_length] = 0; ptr = temp;
signature.asc
Description: OpenPGP digital signature