FreeBSD Bugzilla – Attachment 206711 Details for
Bug 239974
ping(8) crashes with SIGSEGV - Out-of-Bounds Write of size 1 (global-buffer-overflow)
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
proposed patch
file_239974.txt (text/plain), 575 bytes, created by
Neeraj
on 2019-08-19 21:24:19 UTC
(
hide
)
Description:
proposed patch
Filename:
MIME Type:
Creator:
Neeraj
Created:
2019-08-19 21:24:19 UTC
Size:
575 bytes
patch
obsolete
>Index: sbin/ping/ping.c >=================================================================== >--- sbin/ping/ping.c (revision 351229) >+++ sbin/ping/ping.c (working copy) >@@ -941,9 +941,13 @@ > break; > } > if (n == 0 || options & F_FLOOD) { >+ u_char *outpackhdr_end = &outpackhdr[IP_MAXPACKET]; > if (sweepmax && sntransmitted == snpackets) { > for (i = 0; i < sweepincr ; ++i) >- *datap++ = i; >+ if (datap < outpackhdr_end) >+ *datap++ = i; >+ else >+ break; > datalen += sweepincr; > if (datalen > sweepmax) > break;
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=206711">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 239974
: 206711