On Thu, Mar 10, 2016 at 07:50:22PM +0000, Dave Reeve wrote:
> Running l2tpns causes an instance crash as follows:
> 
> # l2tpns -v
> *** buffer overflow detected ***: l2tpns terminated
> (full trace removed as it doesn't help)
> 
> The problem exists in the ring buffer logging code.  Specially the vsprintf
> is called with a length of 4095 when the size of the buffer is MAX_LOG_LENGTH
> (defined as 512 in l2tpns.h).  The result is that as soon as the program is
> executed it crashes as soon as a few log messages are printed.  The following
> patch resolves the problem.
>
> I also have some more minor fixes, which resolve compiler warnings.  I
> am happy to share these if you let me know where to send them!

Upstream these days is at http://git.sameswireless.fr/l2tpns.git and I
note Fernando has been maintaining Debian packaging. As I haven't been
using l2tpns for some time I have emailed him asking if he would like to
take over maintenance of the package in Debian. It's probably best to
send fixes directly upstream.

J.

-- 
/-\                             |  Do I BELIEVE in the Bible?! Hell,
|@/  Debian GNU/Linux Developer |        man I've SEEN one!!!
\-                              |

Reply via email to