[patch] fixes BOF in reply() in ftpd.c ssl version - vsprintf to vsnprintf

linux-ftpd-0.17+ssl-0.3-overflowpatch.diff (text/plain), 532 bytes, created by James Longstreet on 2005-11-05 15:16:43 UTC

--- linux-ftpd-0.17/ftpd/ftpd.c	2005-11-05 17:04:53.000000000 -0600
+++ linux-ftpd-0.17-patched/ftpd/ftpd.c	2005-11-05 17:11:54.000000000 -0600
@@ -2082,9 +2082,9 @@
 	va_start(ap);
 #endif
 #ifdef USE_SSL
-        /* assemble the output into a buffer */
+        /* assemble the output into a buffer, checking for length*/
 	sprintf(outputbuf,"%d ",n);
-	vsprintf(outputbuf+strlen(outputbuf),fmt,ap);
+	vsnprintf(outputbuf+strlen(outputbuf),2048-(strlen(outputbuf) + 3),fmt,ap);
 	strcat(outputbuf,"\r\n");
 
 	if (ssl_debug_flag)