cvs commit: src/lib/libpam/modules/pam_exec pam_exec.c

[Colin Percival]

cperciva    2005-09-19 18:43:11 UTC

  FreeBSD src repository

  Modified files:
    lib/libpam/modules/pam_exec pam_exec.c 
  Log:
  When (re)allocating space for an array of pointers to char, use
  sizeof(*list), not sizeof(**list).  (i.e., sizeof(pointer) rather than
  sizeof(char)).
  
  It is possible that this buffer overflow is exploitable, but it was
  added after RELENG_5 forked and hasn't been MFCed, so this will not
  receive an advisory.
  
  Submitted by:   Vitezslav Novy
  MFC after:      1 day
  
  Revision  Changes    Path
  1.5       +1 -1      src/lib/libpam/modules/pam_exec/pam_exec.c