Hi all,

We have found and fixed a stack corruption in lib/saslutil.c (~line 536 at the 
start of  get_fqhostname):
The two code lines there need to be:

    return_value = gethostname (name, namelen);
    name[namelen - 1] = '\0'; /* ensure string is always 0 terminated*/

The problem is a off by one regarding namelen.

Kind regards,
Gerald Scheidl
------------------------------------------
Cyrus: Devel
Permalink: 
https://cyrus.topicbox.com/groups/devel/T60499d0aa1cb5f13-Mf1ba44ebaaa2540115f32de6
Delivery options: https://cyrus.topicbox.com/groups/devel/subscription

Reply via email to