Package: rssh
Version: 2.3.2-2
Severity: normal
Tags: patch
If the rssh.conf file is not accessible rssh could seg fault due not catching
the
null return of fopen. Patch:
--- rssh-2.3.2.org/rsshconf.c 2005-11-27 23:35:43.000000000 +0100
+++ rssh-2.3.2/rsshconf.c 2008-03-10 09:59:47.757043354 +0100
@@ -135,9 +135,11 @@
log = do_log;
memset(line, 0, CFG_LINE_LEN + 1);
cfg_file = fopen(filename, "r");
- if (!cfg_file && log ) {
- log_set_priority(LOG_WARNING);
- log_msg("config file (%s) missing, using defaults", filename);
+ if (!cfg_file) {
+ if (log) {
+ log_set_priority(LOG_WARNING);
+ log_msg("config file (%s) missing, using defaults",
filename);
+ }
opts->shell_flags = RSSH_ALLOW_SCP;
return FALSE;
}
-- System Information:
Debian Release: 4.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-686
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Versions of packages rssh depends on:
ii debconf [debconf-2.0] 1.5.11etch1 Debian configuration management sy
ii libc6 2.3.6.ds1-13etch5 GNU C Library: Shared libraries
ii openssh-server 1:4.3p2-9 Secure shell server, an rshd repla
rssh recommends no packages.
-- debconf information excluded
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
