[cvslog] Module eggdrop1.6: Change committed

cvslog cvs at tsss.org
Tue Oct 9 12:24:01 CST 2001


CVSROOT    : /usr/local/cvsroot
Module     : eggdrop1.6
Commit time: 2001-10-09 17:23:32 UTC
Commited by: tothwolf

Modified files:
     doc/UPDATES1.6 src/userrec.c

Log message:

fixed buffer overflow in adduser()

---------------------- diff included ----------------------
Index: eggdrop1.6/doc/UPDATES1.6
diff -u eggdrop1.6/doc/UPDATES1.6:1.190 eggdrop1.6/doc/UPDATES1.6:1.191
--- eggdrop1.6/doc/UPDATES1.6:1.190	Tue Oct  9 05:55:06 2001
+++ eggdrop1.6/doc/UPDATES1.6	Tue Oct  9 12:23:21 2001
@@ -1,10 +1,11 @@
-$Id: UPDATES1.6,v 1.190 2001/10/09 10:55:06 tothwolf Exp $
+$Id: UPDATES1.6,v 1.191 2001/10/09 17:23:21 tothwolf Exp $
 
 Changes in eggdrop: (since v1.6.0)
 ----------------------------------
 
 1.6.7
 Found by  Fixed by  What...
+          Tothwolf  fixed buffer overflow in adduser()
           Tothwolf  fixed typo in filedb3.c: EBUG_MEM -> DEBUG_MEM
           Tothwolf  removed extra egg_bzero call from filesys.c
           poptix    properly check argv[]/argc before using it
Index: eggdrop1.6/src/userrec.c
diff -u eggdrop1.6/src/userrec.c:1.32 eggdrop1.6/src/userrec.c:1.33
--- eggdrop1.6/src/userrec.c:1.32	Mon Jul 16 00:14:33 2001
+++ eggdrop1.6/src/userrec.c	Tue Oct  9 12:23:21 2001
@@ -4,7 +4,7 @@
  *   a bunch of functions to find and change user records
  *   change and check user (and channel-specific) flags
  *
- * $Id: userrec.c,v 1.32 2001/07/16 05:14:33 guppy Exp $
+ * $Id: userrec.c,v 1.33 2001/10/09 17:23:21 tothwolf Exp $
  */
 /*
  * Copyright (C) 1997 Robey Pointer
@@ -615,8 +615,8 @@
     xk = nmalloc(sizeof(struct xtra_key));
     xk->key = nmalloc(8);
     strcpy(xk->key, "created");
-    xk->data = nmalloc(10);
-    sprintf(xk->data, "%09lu", now);
+    xk->data = nmalloc(sizeof(time_t));
+    sprintf(xk->data, "%lu", now);
     set_user(&USERENTRY_XTRA, u, xk);
   }
   /* Strip out commas -- they're illegal */
----------------------- End of diff -----------------------



More information about the Changes mailing list