[patch] patch for buffer overflows with glibc-2.9

up-imapproxy-1.2.6-overflow.patch (text/plain), 857 bytes, created by Holger Hoffstätte on 2009-04-13 18:17:07 UTC

diff -urP up-imapproxy-1.2.6-dist/src/request.c up-imapproxy-1.2.6/src/request.c
--- up-imapproxy-1.2.6-dist/src/request.c	2008-01-28 07:15:08.000000000 -0600
+++ up-imapproxy-1.2.6/src/request.c	2008-10-06 13:51:50.000000000 -0500
@@ -714,7 +714,7 @@
      * avoid allocating additional buffers.  Keep this in mind for future
      * code modification...
      */
-    snprintf( Username, BufLen, "Username:" );
+    snprintf( Username, MAXUSERNAMELEN - 1, "Username:" );
     
     EVP_EncodeBlock( EncodedUsername, Username, strlen( Username ) );
     
@@ -770,7 +770,7 @@
     /*
      * Same drill all over again, except this time it's for the password.
      */
-    snprintf( Password, BufLen, "Password:" );
+    snprintf( Password, MAXPASSWDLEN - 1, "Password:" );
     
     EVP_EncodeBlock( EncodedPassword, Password, strlen( Password ) );