[140] in Zephyr_Bugs

home help back first fref pref prev next nref lref last post

portability bug in src/clients/zwrite.c

daemon@ATHENA.MIT.EDU (Bill Sommerfeld)
Fri Nov 9 16:45:07 1990

Date: Fri, 9 Nov 90 16:44:51 -0500
From: Bill Sommerfeld <wesommer@ATHENA.MIT.EDU>
To: zephyr-bugs@ATHENA.MIT.EDU

If you use the "default" signature out of the password file, the code
which conses up the signature out of the struct passwd neglects to
null-terminate the signature.

On systems where the stack segment isn't cleared to all zeros before
main() is called, this results in random garbage appended to the
signature.

Adding a "*cp++ = 0" right before "signature = sigbfr;" around line
201 of zwrite.c should fix it.

					- Bill

home help back first fref pref prev next nref lref last post