Re: Bug#264846: telnet: Buffer Overrun by unchecked environment variables

2004-08-12 Thread Robert Millan
On Thu, Aug 12, 2004 at 10:04:52AM +0200, Bernhard R. Link wrote: I may be utterly confused, but that patch does look quite strange. It may make it near to impossible to introduce code, but only reduces the problem: strncpy will not '\0'-terminate the string, so that the following

Re: Bug#264846: telnet: Buffer Overrun by unchecked environment variables

2004-08-11 Thread Robert Millan
On Tue, Aug 10, 2004 at 10:12:06AM -0700, Josh Martin wrote: -- no debconf information Although this should never actually happen, if you set your environment variable HOME to an extremely large string a buffer overflow will occur upon connecting to a server using telnet. Urgh.. This really