uuxqt bug (long command lines) v7 + others
scw at cepu.UUCP
scw at cepu.UUCP
Fri May 25 07:13:16 AEST 1984
There is a bug in uuxqt.c involving *LONG* mail paths, or long command lines;
SYSTEMS Affected:
v7, v7m, Ultrix-11(??), 2.8BSD, 2.9BSD(??); Anyone with v7 derived
uucp (?probably);
Symptoms:
uuxqt (UUXQT) vanishes leaving LCK.XQT and a 0 length core in
/usr/spool/uucp or a real core file (depending on who actually invoked
it and the permisions on /usr/lib/uuxqt) that has the C back frames
scrogged.
Cause:
While parsing the command line the mail path (argument to rmail)
tramples on the stack. Actually it gets copied to a char[] that is
too short.
Repeat by:
Send a message with more that MAXFULLNAME (uucp.h) characters in the
path. A system with this problem will be unable to pass the message on.
-or-
Generate a bogus X.system1234 file with a long (>MAXFULLNAME) X line
in it. then manually invoke uuxqt with -x4 to watch it die with a
segementation violation.
Fix:
change line ~~40 from:
char xcmd[100];
to:
char xcmd[BUFSIZ];
Change line ~~50 from:
char *cmdp, prm[MAXFULLLNAME],*ptr;
to:
char *cmdp, prm[BUFSIZ],*ptr;
This fix will allow command lines to be up to 511 char long.
--
Stephen C. Woods (VA Wadsworth Med Ctr./UCLA Dept. of Neurology)
uucp: { {ihnp4, uiucdcs}!bradley, hao, trwrb, sdcsvax!bmcg}!cepu!scw
ARPA: cepu!scw at ucla-locus location: N 34 06'37" W 118 25'43"
More information about the Net.bugs.v7
mailing list