Re: ntpd =< 4.0.99k remote buffer overflow

[Maciej W. Rozycki]

On Fri, 6 Apr 2001, Erik Fichtner wrote:

> +                                               /* avoid buffer overflow */
> +                                               if (tp > buf + sizeof(buf)) 
>return(0);
> +                                       }

 There is an off-by-one error here.  The above conditional should read as
follows:

if (tp >= buf + sizeof(buf)) return(0);

--
+  Maciej W. Rozycki, Technical University of Gdansk, Poland   +
+--------------------------------------------------------------+
+        e-mail: [EMAIL PROTECTED], PGP key available        +