INN BUFFEROVERFLOWS!

Russ Allbery rra at stanford.edu
Tue Jan 16 22:21:22 UTC 2007


zybadawg333 at hushmail.com writes:

> innd/cc.c:1810:    i = RECVorREAD(CCchan->fd, buff, bufflen) ;
> lib/inndcomm.c:337:    i = RECVorREAD(ICCfd, buff, bufsiz);
> lib/inndcomm.c:374:    i = RECVorREAD(ICCfd, buff, rlen);

Why do you think those are buffer overflows?

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>



More information about the inn-bugs mailing list