diff options
author | nectar <nectar@FreeBSD.org> | 2002-06-10 15:18:06 +0000 |
---|---|---|
committer | nectar <nectar@FreeBSD.org> | 2002-06-10 15:18:06 +0000 |
commit | 8cc0af8bfc7d002f4e3677f5ddebbe877f01a395 (patch) | |
tree | 9f6c1b0087768eb4a7516a4b5e137dd88ddd50c3 /news/nn/files | |
parent | 2060997dedabc349d3073e15b3dae14692566205 (diff) | |
download | FreeBSD-ports-8cc0af8bfc7d002f4e3677f5ddebbe877f01a395.zip FreeBSD-ports-8cc0af8bfc7d002f4e3677f5ddebbe877f01a395.tar.gz |
Fix remotely exploitable format string vulnerability.
Diffstat (limited to 'news/nn/files')
-rw-r--r-- | news/nn/files/patch-an | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/news/nn/files/patch-an b/news/nn/files/patch-an index 409d93c..ebb1611 100644 --- a/news/nn/files/patch-an +++ b/news/nn/files/patch-an @@ -1,5 +1,5 @@ --- nntp.c.orig Tue Oct 9 11:39:11 2001 -+++ nntp.c Fri Dec 7 07:10:29 2001 ++++ nntp.c Mon Jun 10 10:15:02 2002 @@ -37,6 +37,7 @@ #include <errno.h> #include <pwd.h> @@ -66,6 +66,15 @@ * get_server_line: get a line from the server. * * Expects to be connected to the server. +@@ -634,7 +679,7 @@ + can_post = 0; + break; + default: +- nn_exitmsg(1, line); ++ nn_exitmsg(1, "%s", line); + /* NOTREACHED */ + } + } @@ -1726,7 +1771,7 @@ * Phil Lapsley <phil@ucbvax.berkeley.edu> */ |