]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
When (re)allocating space for an array of pointers to char, use
authorcperciva <cperciva@FreeBSD.org>
Mon, 19 Sep 2005 18:43:11 +0000 (18:43 +0000)
committercperciva <cperciva@FreeBSD.org>
Mon, 19 Sep 2005 18:43:11 +0000 (18:43 +0000)
commita257862d4b574dd3958622bbe9d606f532b79c6c
treea49151162fd35076951a92a968baf9fffd4dc955
parent55be30560c859a87d8660f3d2a7459e590252782
When (re)allocating space for an array of pointers to char, use
sizeof(*list), not sizeof(**list).  (i.e., sizeof(pointer) rather than
sizeof(char)).

It is possible that this buffer overflow is exploitable, but it was
added after RELENG_5 forked and hasn't been MFCed, so this will not
receive an advisory.

Submitted by: Vitezslav Novy
MFC after: 1 day
lib/libpam/modules/pam_exec/pam_exec.c