News for hackers. Stuff that matters.

A comment on BSD libc contains a buffer overflow vulnerability. Parent comment

Re:BSD libc contains a buffer overflow vulnerability by ben_bai on Wednesday December 07, 2016 @05:08PM (#13126719)
4.3BSD-Reno, basically unchanged since 1990 until yesterday.

http://minnie.tuhs.org/cgi-bin/utree.pl?file=4.3BSD-Reno/src...

Personally I'm more worried about the function returning obuf, a pointer to a stack variable in link_ntoa.

[ Parent | on HN ]
Re:BSD libc contains a buffer overflow vulnerability by tedunangst on Wednesday December 07, 2016 @05:47PM (#13126970)
That's not on the stack.
[ Parent | on HN ]
Re:BSD libc contains a buffer overflow vulnerability by ben_bai on Thursday December 08, 2016 @03:19AM (#13129092)
Oh indeed. Static it is...
[ Parent | on HN ]