[Bug 214237] Stack buffer lifetime mis-use in ncal(1)

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=214237

            Bug ID: 214237
           Summary: Stack buffer lifetime mis-use in ncal(1)
           Product: Base System
           Version: 10.3-STABLE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: misc
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: J.deBoynePollard-newsgroups at NTLWorld.COM

The buffer used to obtain the standout start and standout end sequences from
termcap is used long after its lifetime has ended, and potentially something
else has written to that area of stack storage.

The fix is to adjust line 1113 of usr.bin/ncal/ncal.c to

    static char cbuf[512];
    char tbuf[1024], *b;

-- 
You are receiving this mail because:
You are the assignee for the bug.