Package: solid-pop3d
Version: 0.15-30
Severity: important
Tag: patch,ipv6

The solid-pop3d daemon process crashes (segmentation faults) when a client 
connect to the daemon via ipv6 protocol.

Because the 'ntopbuff' variable in standalone.c is too small buffer size.
The 'inet_ntop' main page says the buffer size must be at least 
INET6_ADDRSTRLEN bytes long.
However the 'ntopbuff' is only 24 bytes long.

The following is the patch.


--- standalone.c.orig   2000-05-01 05:56:21.000000000 +0900
+++ standalone.c        2020-11-17 14:36:27.411167044 +0900
@@ -87,7 +87,7 @@

 int main(int argc, char **argv) {
 #ifdef SPIPV6
-       char ntopbuff[24];
+       char ntopbuff[INET6_ADDRSTRLEN];
        union sp_sockaddr address;
 #else
        struct sockaddr_in address;

//EndOfMessage
/

Reply via email to