Bug 37400 - The cosmo game contains unchecked buffers
Summary: The cosmo game contains unchecked buffers
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Yukihiro Nakai
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2002-04-23 23:00 UTC by Niels Heinen
Modified: 2002-08-03 09:05 UTC (History)
0 users

See Also:

Attachments
file.diff (2.13 KB, patch)
2002-04-23 23:00 UTC, Niels Heinen 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Niels Heinen 2002-04-23 23:00:03 UTC 
      

The cosmo game, which is installed setgid games can be cause
to segfault trought the -display and -bg parameters. Additionally,
during some test it tried to free() memory that was already given back
to the system.

How-To-Repeat:       

cosmo -display <A x 10000>
cosmo -bg <A x 10000>
Comment 1 Kris Kennaway 2002-04-24 03:02:32 UTC 
On Tue, Apr 23, 2002 at 02:52:10PM -0700, Niels Heinen wrote:
> 
> >Number:         37400
> >Category:       ports
> >Synopsis:       The cosmo game contains unchecked buffers
> >Confidential:   no
> >Severity:       serious
> >Priority:       medium
> >Responsible:    freebsd-ports
> >State:          open
> >Quarter:        
> >Keywords:       
> >Date-Required:
> >Class:          sw-bug
> >Submitter-Id:   current-users
> >Arrival-Date:   Tue Apr 23 15:00:03 PDT 2002
> >Closed-Date:
> >Last-Modified:
> >Originator:     Niels Heinen
> >Release:        4.5
> >Organization:
> >Environment:
> FreeBSD lappie 4.5-STABLE FreeBSD 4.5-STABLE #0: Thu Apr 18 02:05:19 CEST 2002     root@lappie:/usr/obj/usr/src/sys/GENERIC  i386
> 
> >Description:
>       
> 
> The cosmo game, which is installed setgid games can be cause
> to segfault trought the -display and -bg parameters. Additionally,
> during some test it tried to free() memory that was already given back
> to the system.

FYI, this isn't a serious security problem precisely because it's
setgid games, and not setuid anything (the games group has no
privileges except to write to score/save files).  You might already be
aware of this.

Thanks for the patch though.

Kris
Comment 2 Ying-Chieh Liao freebsd_committer freebsd_triage 2002-05-21 08:26:40 UTC 
Responsible Changed
From-To: freebsd-ports->nakai

over to maintainer
Comment 3 Yukihiro Nakai freebsd_committer freebsd_triage 2002-08-03 09:05:23 UTC 
State Changed
From-To: open->closed

Fix committed, thanks!