[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: buffer overflow in /bin/gzip?



Dans un message du 20 nov à 23:33, Anders Gjære écrivait :
>
> in gzip.c
> 
> the line:
> 	strcpy(nbuf,dir);
> 
> should maybe be replaced with:
> 	strncpy(nbuf, dir,sizeof(nbuf));

gzip runs with user privileges, therefore this is not a security
problem.

-- 
Guillaume Morin <guillaume@morinfr.org>

                  Batailler corps et âmes pour un maudit refus
                              (No one is innocent)



Reply to: