You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@trafficserver.apache.org by "Leif Hedstrom (JIRA)" <ji...@apache.org> on 2009/11/04 23:47:32 UTC

[jira] Created: (TS-12) Pontential buffer overrun in traffic_line command line

Pontential buffer overrun in traffic_line command line
------------------------------------------------------

                 Key: TS-12
                 URL: https://issues.apache.org/jira/browse/TS-12
             Project: Traffic Server
          Issue Type: Bug
          Components: Security
            Reporter: Leif Hedstrom
            Priority: Minor


There are potential buffer overruns in CliMain.cc, where we do things like

   strncat(buf, "x", sizeof(buf);
   strncat(buf, "y", sizeof(buf);


Proposed patch coming next.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (TS-12) Pontential buffer overrun in traffic_line command line

Posted by "vijaya bhaskar mamidi (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/TS-12?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12773689#action_12773689 ] 

vijaya bhaskar mamidi commented on TS-12:
-----------------------------------------

reviewed

> Pontential buffer overrun in traffic_line command line
> ------------------------------------------------------
>
>                 Key: TS-12
>                 URL: https://issues.apache.org/jira/browse/TS-12
>             Project: Traffic Server
>          Issue Type: Bug
>          Components: Security
>            Reporter: Leif Hedstrom
>            Priority: Minor
>         Attachments: buff.diff
>
>
> There are potential buffer overruns in CliMain.cc, where we do things like
>    strncat(buf, "x", sizeof(buf);
>    strncat(buf, "y", sizeof(buf);
> Proposed patch coming next.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Resolved: (TS-12) Pontential buffer overrun in traffic_line command line

Posted by "Leif Hedstrom (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-12?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Leif Hedstrom resolved TS-12.
-----------------------------

    Resolution: Fixed

Fixed, tested on Ubuntu and Fedora Core.

> Pontential buffer overrun in traffic_line command line
> ------------------------------------------------------
>
>                 Key: TS-12
>                 URL: https://issues.apache.org/jira/browse/TS-12
>             Project: Traffic Server
>          Issue Type: Bug
>          Components: Security
>            Reporter: Leif Hedstrom
>            Priority: Minor
>         Attachments: buff.diff
>
>
> There are potential buffer overruns in CliMain.cc, where we do things like
>    strncat(buf, "x", sizeof(buf);
>    strncat(buf, "y", sizeof(buf);
> Proposed patch coming next.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (TS-12) Pontential buffer overrun in traffic_line command line

Posted by "Leif Hedstrom (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/TS-12?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Leif Hedstrom updated TS-12:
----------------------------

    Attachment: buff.diff

Proposed patch.

> Pontential buffer overrun in traffic_line command line
> ------------------------------------------------------
>
>                 Key: TS-12
>                 URL: https://issues.apache.org/jira/browse/TS-12
>             Project: Traffic Server
>          Issue Type: Bug
>          Components: Security
>            Reporter: Leif Hedstrom
>            Priority: Minor
>         Attachments: buff.diff
>
>
> There are potential buffer overruns in CliMain.cc, where we do things like
>    strncat(buf, "x", sizeof(buf);
>    strncat(buf, "y", sizeof(buf);
> Proposed patch coming next.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.