Sent from my iPhone

Begin forwarded message:

> From: Mark Gray <[email protected]>
> Date: March 30, 2021 at 13:18:35 EDT
> To: libreswan/libreswan <[email protected]>
> Cc: Subscribed <[email protected]>
> Subject: [libreswan/libreswan] snprintf()  truncates --rundir in plutomain.c 
> (#428)
> Reply-To: libreswan/libreswan 
> <reply+aaw5l6mmplidagclg6td5w56n47gnevbnhhdexd...@reply.github.com>
> 
> 
> mkdir /tmp/ipsec.d && ipsec initnss --nssdir /tmp/ipsec.d
> mkdir 
> /tmp/somelongpathxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/
> sudo ipsec pluto  --nssdir /tmp/ipsec.d 
> --rundir/tmp/somelongpathxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/
> ls -al /tmp/some*
> This returns:
> 
> srwx------. 1 root   root  0 Mar 30 13:12 
> /tmp/somelongpathxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> 
> /tmp/somelongpathxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx:
> total 12
> The socket does is not placed in the directory.
> 
> Even more confusing is when the length of rundir is 107 
> (sizeof(ctl_addr.sun_path)) characters (which was my case)
> 
> mkdir /tmp/ipsec.d && ipsec initnss --nssdir /tmp/ipsec.d
> mkdir 
> /tmp/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/
> sudo ipsec pluto  --nssdir /tmp/ipsec.d --rundir 
> /tmp/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/
> This returns the following which is really confusing!
> 
> pluto: FATAL: unable to create lock file 
> "/tmp/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/"
>  (21 Is a directory)
> Both are due to the following line in which the return code of snprintf() is 
> not checked for truncation: 
> https://github.com/libreswan/libreswan/blob/d2b9fbfae9761c440e3ce21576b7a0fe80f6a3fe/programs/pluto/plutomain.c#L1100
> 
> —
> You are receiving this because you are subscribed to this thread.
> Reply to this email directly, view it on GitHub, or unsubscribe.
_______________________________________________
Swan-dev mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-dev

Reply via email to