- Chris Hardie <[EMAIL PROTECTED]>:

| > So what system is this happening on?  I am sure Dan will be
| > interested, so he can try to harden qmail against this kind of
| > silliness.
| 
| This is on FreeBSD 2.2.8.  So, um, what do I/we do now?

First, replace the line

#define GETPW_USERLEN 32

in qmail-getpw.c by

#define GETPW_USERLEN 9

and recompile (use 9, not 8, to have room for the terminating NUL).
This should take care of your immediate problem.

Second, I guess a bug report to the FreeBSD maintainers might be
appropriate.  There is a form for submitting bug reports available
from the FreeBSD home page at <URL:http://www.freebsd.org/> somewhere.

- Harald

Reply via email to