Bug 30913

Summary: fingerd(8) execv failure due to missing argv termination (patch)
Product: Base System Reporter: Dimitri Lommers <dimitri>
Component: binAssignee: freebsd-bugs (Nobody) <bugs>
Status: Closed FIXED    
Severity: Affects Only Me    
Priority: Normal    
Version: 4.3-RELEASE   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
file.diff none

Description Dimitri Lommers 2001-09-29 15:50:00 UTC 
When the maximum number of names are given to fingerd (50-3), the argv array given to execv will not be NULL terminated, resulting in a bad address return.

Fix: # diff -c fingerd.c fingerd.c.new
How-To-Repeat: telnet localhost finger, enter 47 or more arguments, see /var/log/messages
Comment 1 chern freebsd_committer freebsd_triage 2001-10-10 02:26:30 UTC 
State Changed
From-To: open->closed

ru has applied your patch--fingerd.c v1.18 no longer suffers from this problem. 
Thanks!