ppp/pppd
Emanuele Rocca d896af655c Fix buffer overflow in rc_mksid()
rc_mksid converts the PID of pppd to hex to generate a pseudo-unique string.

If the process id is bigger than 65535 (FFFF), its hex representation will be
longer than 4 characters, resulting in a buffer overflow.

The bug can be exploited to cause a remote DoS.

Bug-Debian: https://bugs.debian.org/782450
Last-Update: <2015-04-14>

Gbp-Pq: Name rc_mksid-no-buffer-overflow
2022-05-14 02:43:52 +08:00
..
plugins Fix buffer overflow in rc_mksid() 2022-05-14 02:43:52 +08:00
.gitignore Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
Makefile.linux zzz_config 2022-05-14 02:43:52 +08:00
Makefile.sol2 Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
auth.c no_crypt_hack 2022-05-14 02:43:52 +08:00
cbcp.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
cbcp.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
ccp.c [PATCH 09/16] pppd: Fix ccp_cilen calculated size if both deflate_correct and deflate_draft are enabled 2022-05-14 02:43:51 +08:00
ccp.h [PATCH 08/16] pppd: Fix ccp_options.mppe type 2022-05-14 02:43:51 +08:00
chap-md5.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
chap-md5.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
chap-new.c ppp-2.4.2-stripMSdomain 2022-05-14 02:43:52 +08:00
chap-new.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
chap_ms.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
chap_ms.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
demand.c ppp-2.3.11-oedod.dif 2022-05-14 02:43:52 +08:00
eap.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
eap.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
ecp.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
ecp.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
eui64.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
eui64.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
fsm.c [PATCH 10/16] Fix a typo in comment. Diff from Yuuichi Someya. 2022-05-14 02:43:52 +08:00
fsm.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
ipcp.c resolv.conf_no_log 2022-05-14 02:43:52 +08:00
ipcp.h Add replacedefaultroute option 2022-05-14 02:43:52 +08:00
ipv6cp.c ipv6-accept-remote 2022-05-14 02:43:52 +08:00
ipv6cp.h ipv6-accept-remote 2022-05-14 02:43:52 +08:00
ipxcp.c [PATCH 07/16] pppd: ipxcp: Prevent buffer overrun on remote router name 2022-05-14 02:43:51 +08:00
ipxcp.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
lcp.c adaptive_echos 2022-05-14 02:43:52 +08:00
lcp.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
magic.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
magic.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
main.c _ip-up_option 2022-05-14 02:43:52 +08:00
md4.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
md4.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
md5.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
md5.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
mppe.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
multilink.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
options.c setenv_call_file 2022-05-14 02:43:52 +08:00
patchlevel.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
pathnames.h zzz_config 2022-05-14 02:43:52 +08:00
ppp.pam Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
pppcrypt.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
pppcrypt.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
pppd.8 ipv6-accept-remote 2022-05-14 02:43:52 +08:00
pppd.h zzz_config 2022-05-14 02:43:52 +08:00
session.c no_crypt_hack 2022-05-14 02:43:52 +08:00
session.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
sha1.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
sha1.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
spinlock.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
spinlock.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
srp-entry.8 Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
srp-entry.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
sys-linux.c Add replacedefaultroute option 2022-05-14 02:43:52 +08:00
sys-solaris.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
tdb.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
tdb.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
tty.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
upap.c Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
upap.h Import Upstream version 2.4.7 2022-05-14 02:43:48 +08:00
utils.c [PATCH 04/16] pppd: Fix sign-extension when displaying bytes in octal 2022-05-14 02:43:51 +08:00