Hi,

I believe there is a simple error in getpass.c, line 80:



  static char buf[PWD_BUFFER_SIZE];

  ...

  /* Read the password.  */
  fgets (buf, PWD_BUFFER_SIZE-1, in);
  if (buf != NULL)

  ...



So the result of fgets is not being checked here, results in reading the
buffer uninitialised below.

-- 
Regards,

Daniel Wainwright
_______________________________________________
uClibc mailing list
[email protected]
http://lists.busybox.net/mailman/listinfo/uclibc

Reply via email to