Package: openfortivpn
Version: 1.14.0-1
Severity: wishlist

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

I realize it's only been out a week, but the change has at least
potential security implications.

diff --git a/src/ipv4.c b/src/ipv4.c
index 9191f00..91ff763 100644
- --- a/src/ipv4.c
+++ b/src/ipv4.c
@@ -1063,10 +1063,10 @@ int ipv4_add_nameservers_to_resolv_conf(struct tunnel 
*tunnel)
        int ret = -1;
        FILE *file;
        struct stat stat;
- -#define NS_SIZE ARRAY_SIZE("nameserver xxx.xxx.xxx.xxx")
+#define NS_SIZE ARRAY_SIZE("nameserver xxx.xxx.xxx.xxx\n")
        char ns1[NS_SIZE], ns2[NS_SIZE];
 #undef NS_SIZE
- -#define DNS_SUFFIX_SIZE (ARRAY_SIZE("search ") + MAX_DOMAIN_LENGTH)
+#define DNS_SUFFIX_SIZE (ARRAY_SIZE("search \n") + MAX_DOMAIN_LENGTH)
        char dns_suffix[DNS_SUFFIX_SIZE];
 #undef DNS_SUFFIX_SIZE
        char *buffer = NULL;


cheers,

d
- -- System Information:
Debian Release: bullseye/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.6.0-1-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_CA:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages openfortivpn depends on:
ii  libc6        2.30-8
ii  libssl1.1    1.1.1g-1
ii  libsystemd0  245.5-3
ii  ppp          2.4.7-2+4.1+deb10u1

openfortivpn recommends no packages.

openfortivpn suggests no packages.

- -- Configuration Files:
/etc/openfortivpn/config [Errno 13] Permission denied: 
'/etc/openfortivpn/config'

- -- no debconf information

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEkiyHYXwaY0SiY6fqA0U5G1WqFSEFAl7PwI4ACgkQA0U5G1Wq
FSFe5w//SspLBLQXktakzaRNpUtA59AhMgioKrvhamAKUaDjhn4JTtwjyNcF7rDh
hmHg4QoMEZXUti0AvW8Wk9n4x1ZYC0g8l5SiprCNes6PPRmPwJxpSVAowbQAwVYI
H84pWSCiM4mn/EXitIJ9tRu+3wfh521q6sO+mPTR+icaM5S3PxzEZdlFTHg3bXi9
zmC0IvijTMKf3XfWXflB1gBVB/doiJJ3hzNZaBl+AJK946YR/Plb8oX9FXQKRJ8s
PCE2NggG3NxcnY65sYv+k1zWFR69wP19UY8T8uYQQknYCL18Y7rzqIPseNtPSyZ+
Smy4UoZQn6+5euPe+veqbLt4i0AuywdSmiuLvMKHqb0PtBCz/7RmylM88etz6pyM
yWQqmb8p3RgfeAALtlRIMUB1lJRMoTHDBdIc+RHsEI5IPwhTdarZsAd7PW4sdNdN
MnNYocQhAFDE6iHopKw1tjt7r/hvIYcZz3whMjvxhdmu95q9CfB5Y5SqPN7Pj0FG
5BNb+42ffhKuKIsdvwkxji0K8VuURwmDsNhfN3HwJagTbdKGUUX+FKr0KdeH1e70
5gKt1k5eIh/BoLizKYvRgKtvfEMooS5+mNutQRkVJm+MbzyTFk8CzntOUBgupqb3
d5hr03A+z4JeyxnTx7/vSK+BqjL/asOoCwtObLHGTV7qy7f7AEk=
=mosx
-----END PGP SIGNATURE-----

Reply via email to