Your message dated Sun, 24 Feb 2008 21:50:01 +0100
with message-id <[EMAIL PROTECTED]>
and subject line No bug
has caused the Debian Bug report #381603,
regarding cfingerd: Reads beyond the array if finger forwarding is on.
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)
--
381603: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=381603
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: cfingerd
Version: 1.4.3-1.2
Severity: normal
Tags: patch
If finger forwarding is enabled and requested username looks like '/W
/user' cfingerd starts checking remote servers not from first but
from second. If there is only one server specified reading beyond the
array occurs. During my tests this caused closing connections without
giving reason.
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'stable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-ck1
Locale: LANG=pl_PL, LC_CTYPE=pl_PL (charmap=ISO-8859-2) (ignored: LC_ALL set to
pl_PL)
Versions of packages cfingerd depends on:
ii libc6 2.3.6-18 GNU C Library: Shared libraries
ii netbase 4.25 Basic TCP/IP networking system
cfingerd recommends no packages.
-- no debconf information
diff -Nur a/src/standard.c b/src/standard.c
--- a/src/standard.c 2006-08-04 20:59:46.000000000 +0200
+++ b/src/standard.c 2006-08-05 21:38:32.000000000 +0200
@@ -1006,6 +1006,7 @@
nums++;
strcpy(uname, username + nums);
strcpy(username, uname);
+ nums=0;
}
if ((!(prog_config.config_bits2 & SHOW_FINGERFWD)) ||
--- End Message ---
--- Begin Message ---
This is actually a feature. Quoting the source:
/*
** Support to change the "/W" or "-L" listings from Microsoft's
** bloated finger program. This combats their options, and ignores
** them.
**
** Ken Hollis 08/06/96
*/
Regards,
Joey
--
Life is too short to run proprietary software. -- Bdale Garbee
Please always Cc to me when replying to me on the lists.
--- End Message ---
