Re: ncurses buffer overflows (fwd)

[Thomas E. Dickey]

On Mon, 2 Oct 2000, [iso-8859-1] Jouko Pynn?nen wrote:

> 
> On Mon, 2 Oct 2000, Thomas E. Dickey wrote:
> 
> > I'd like to see the exploit: there are too many perhaps/maybes in this
> 
> This is a demonstration script I sent to linux people on
> address@hidden, works straight on rh-6.2 and SuSE-6.4, other platforms
> may need fiddling with the number values...

...and does it break if we limit the strcpy's in lib_mvcur.c ?

(it's a small change to relatively stable code: it would make more sense
to distribute the patch than rely on someone else to deduce it).

-- 
T.E.Dickey <address@hidden>
http://dickey.his.com
ftp://dickey.his.com