Hello Gerard,

is this fixed upstream

https://github.com/cyrusimap/cyrus-sasl/blob/master/lib/saslutil.c#L528

?

Greetings
  Дилян

On Wed, 2021-10-06 at 03:51 -0400, gerald.scheidl via Devel wrote:
> Hi all,
> 
> We have found and fixed a stack corruption in lib/saslutil.c (~line 536
> at the start of  get_fqhostname):
> The two code lines there need to be:
> 
>     return_value = gethostname (name, namelen);
>     name[namelen - 1] = '\0'; /* ensure string is always 0 terminated*/
> 
> The problem is a off by one regarding namelen.
> 
> Kind regards,
> Gerald Scheidl
> Cyrus / Devel / seediscussions +participants +delivery optionsPermalink

------------------------------------------
Cyrus: Devel
Permalink: 
https://cyrus.topicbox.com/groups/devel/Te46e721837320c06-M759dabf93c5b0714c7ef491b
Delivery options: https://cyrus.topicbox.com/groups/devel/subscription
  • Found a stack corruption gerald.scheidl via Devel
    • Re: Found a stack corruption (saslutil.c:... Дилян Палаузов

Reply via email to