bin/86647: natd(8) copy to limited buffer size without checking range

Fri Jul 6 00:00:30 UTC 2007

The following reply was made to PR bin/86647; it has been noted by GNATS.

From: "Stephen Hurd" <shurd at broadcom.com>
To: bug-followup at FreeBSD.org,
	shurd at sasktel.net
Cc:  
Subject: Re: bin/86647: natd(8) copy to limited buffer size without
 checking range
Date: Thu, 5 Jul 2007 16:44:45 -0700

 This is a multi-part message in MIME format.

 ------_=_NextPart_001_01C7BF5E.7792EC6B
 Content-Type: multipart/alternative;
  boundary="----_=_NextPart_002_01C7BF5E.7792EC6B"
 Content-Transfer-Encoding: 7bit

 ------_=_NextPart_002_01C7BF5E.7792EC6B
 Content-Type: text/plain;
  charset=us-ascii
 Content-Transfer-Encoding: quoted-printable

 Patch against current RELENG_6_2.  Fix problem using strdup()
 =20
 Stephen Hurd
 Senior Engineering Technician 3
 Broadcom Corporation
 949-926-8039
 shurd at broadcom.com=20
 =20

 ------_=_NextPart_002_01C7BF5E.7792EC6B
 Content-Type: text/html;
  charset=us-ascii
 Content-Transfer-Encoding: quoted-printable

 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
 <HTML><HEAD>
 <META http-equiv=3DContent-Type content=3D"text/html; =
 charset=3Dus-ascii">
 <META content=3D"MSHTML 6.00.2900.3059" name=3DGENERATOR></HEAD>
 <BODY>
 <DIV><SPAN class=3D563104323-05072007><FONT face=3DArial size=3D2>Patch =
 against=20
 current RELENG_6_2.&nbsp; Fix problem using strdup()</FONT></SPAN></DIV>
 <DIV>&nbsp;</DIV>
 <DIV align=3Dleft>Stephen Hurd<BR>Senior Engineering Technician =
 3<BR>Broadcom=20
 Corporation<BR>949-926-8039<BR><A=20
 href=3D"mailto:shurd at broadcom.com">shurd at broadcom.com</A> </DIV>
 <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV></BODY></HTML>

 ------_=_NextPart_002_01C7BF5E.7792EC6B--

 ------_=_NextPart_001_01C7BF5E.7792EC6B
 Content-Type: application/octet-stream;
  name=natd.patch
 Content-Transfer-Encoding: base64
 Content-Description: natd.patch
 Content-Disposition: attachment;
  filename=natd.patch

 MTU2NmMxNTY2CjwgCWNoYXIJCWJ1ZlsxMjhdOwotLS0KPiAJY2hhcioJCWJ1ZjsKMTU4NWMxNTg1
 LDE1ODgKPCAJc3RybGNweSAoYnVmLCBwYXJtcywgc2l6ZW9mKGJ1ZikpOwotLS0KPiAJYnVmID0g
 c3RyZHVwIChidWYpOwo+IAlpZiAoIWJ1ZikKPiAJCWVycnggKDEsICJyZWRpcmVjdF9wb3J0OiBz
 dHJkdXAoKSBmYWlsZWQiKTsKPiAKMTcwMWExNzA1LDE3MDYKPiAKPiAJZnJlZSAoYnVmKTsKMTcw
 N2MxNzEyCjwgCWNoYXIJCWJ1ZlsxMjhdOwotLS0KPiAJY2hhcioJCWJ1ZjsKMTcxNmMxNzIxLDE3
 MjQKPCAJc3RybGNweSAoYnVmLCBwYXJtcywgc2l6ZW9mKGJ1ZikpOwotLS0KPiAJYnVmID0gc3Ry
 ZHVwIChidWYpOwo+IAlpZiAoIWJ1ZikKPiAJCWVycnggKDEsICJyZWRpcmVjdF9wcm90bzogc3Ry
 ZHVwKCkgZmFpbGVkIik7Cj4gCjE3NTdhMTc2NiwxNzY3Cj4gCj4gCWZyZWUoYnVmKTsKMTc2MmMx
 NzcyCjwgCWNoYXIJCWJ1ZlsxMjhdOwotLS0KPiAJY2hhcioJCWJ1ZjsKMTc3MGMxNzgwLDE3ODMK
 PCAJc3RybGNweSAoYnVmLCBwYXJtcywgc2l6ZW9mKGJ1ZikpOwotLS0KPiAJYnVmID0gc3RyZHVw
 IChidWYpOwo+IAlpZiAoIWJ1ZikKPiAJCWVycnggKDEsICJyZWRpcmVjdF9hZGRyZXNzOiBzdHJk
 dXAoKSBmYWlsZWQiKTsKPiAKMTgwNmExODIwLDE4MjEKPiAKPiAJZnJlZShidWYpOwo=

 ------_=_NextPart_001_01C7BF5E.7792EC6B--