Source: xymon
Version: 4.3.17-1
Severity: grave
Tags: security patch pending
web/acknowledge.c uses a string twice in a format string, but only
allocates memory for one copy. The attached patch fixes this.
Christoph
--
[email protected] | http://www.df7cb.de/
--- a/web/acknowledge.c
+++ b/web/acknowledge.c
@@ -289,7 +289,7 @@ int main(int argc, char *argv[])
pcre *dummy;
char *re;
- re = (char *)malloc(8 +
strlen(pagename));
+ re = (char *)malloc(8 +
2*strlen(pagename));
sprintf(re, "%s$|^%s/.+", pagename,
pagename);
dummy = compileregex(re);
if (dummy) {
_______________________________________________
Secure-testing-team mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-team
