Julius Hemanth Pitti 232b82afd4 netkit-telnetd: Fix buffer overflow in netoprintf ... netoprintf() was not handling a case where return value of vsnprintf is greater than "size"(2nd argument), results in buffer overflow while adjusting "nfrontp" pointer to point beyond "netobuf" buffer. Here is one such case where "nfrontp" crossed boundaries of "netobuf", and pointing to another global variable. (gdb) p &netobuf[8255] $5 = 0x55c93afe8b1f <netobuf+8255> "" (gdb) p nfrontp $6 = 0x55c93afe8c20 <terminaltype> "\377" (gdb) p &terminaltype $7 = (char **) 0x55c93afe8c20 <terminaltype> (gdb) This resulted in crash of telnetd service with segmentation fault. Signed-off-by: Julius Hemanth Pitti <jpitti@cisco.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>		2020-07-21 16:46:36 -07:00
..
0001-telnet-telnetd-Fix-deadlock-on-cleanup.patch	telnetd: Fix deadlock on cleanup	2018-06-12 09:13:46 -07:00
0001-telnet-telnetd-Fix-print-format-strings.patch	netkit-telnet: Fix build with hardening	2017-09-08 16:38:09 -04:00
0001-telnetd-utility.c-Fix-buffer-overflow-in-netoprintf.patch	netkit-telnetd: Fix buffer overflow in netoprintf	2020-07-21 16:46:36 -07:00
cross-compile.patch	netkit-telnet: support the cross-compile	2015-05-11 10:25:52 +02:00
CVE-2020-10188.patch	netkit-telnet: fix CVE-2020-10188	2020-04-25 08:32:42 -07:00
telnet-xinetd	netkit-telnet: add new recipe	2015-02-11 21:25:30 -05:00
To-aviod-buffer-overflow-in-telnet.patch	netkit-telnet: add new recipe	2015-02-11 21:25:30 -05:00
Warning-fix-in-the-step-of-install.patch	netkit-telnet: add new recipe	2015-02-11 21:25:30 -05:00