[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [bug-inetutils] Buffer overflow for gnu inetutils telnetd
From: |
Chris Severance |
Subject: |
Re: [bug-inetutils] Buffer overflow for gnu inetutils telnetd |
Date: |
Tue, 11 Jul 2017 14:45:52 -0400 |
Try compiling with -fstack-protector-strong. If that's not enough you'll
need to add -fstack-protector-strong to your glibc. The easiest way to
do that is to install an Arch based distro and install inetutils-git
from the AUR with the patch removed.
https://aur.archlinux.org/packages/inetutils-git/
All you're going to see is a crash which isn't very interesting.
The patch works. I see sizeof is why just changing the buffer size did
not produce a useful result.
On Tue, Jul 11, 2017, at 12:18 PM, Alfred M. Szmidt wrote:
> The right way to fix this is to not repeat the same gibberish code 7
> times, and then having a sensible test that checks the output. Which
> is exactly why I asked a means to reproduce the problem. That is not
> at all provided by the original bug report!
>