Package: solid-pop3d
Version: 0.15-30
Severity: important
Tag: patch,ipv6

The solid-pop3d daemon process crashes (segmentation faults) when a client 
connect to the daemon via ipv6 protocol.

Because the 'ntopbuff' variable in main.c is too small buffer size.
The 'inet_ntop' main page says the buffer size must be at least 
INET6_ADDRSTRLEN bytes long.
However the 'ntopbuff' is only 100 bytes long.

The following is the patch.

--- main.c.orig 2000-05-13 22:18:40.000000000 +0900
+++ main.c      2020-11-17 13:36:45.941701101 +0900
@@ -1008,7 +1008,7 @@
        struct hostent *hentname;
 #endif
 #ifdef SPIPV6
-       char ntopbuff[100];
+       char ntopbuff[INET6_ADDRSTRLEN];
 #endif
 #endif

//EOM

Reply via email to