Module Name: src
Committed By: shm
Date: Fri Sep 22 15:28:36 UTC 2023
Modified Files:
src/libexec/telnetd: state.c
Log Message:
Fix off by one in telrcv()
In case of "\r" in the data buffer, the code was unconditionally looking ahead
to next character, even if "\r" was last character in the buffer. That
condition leads to read outside of the data (one byte after the array)
Thanks christos@ for the review
To generate a diff of this commit:
cvs rdiff -u -r1.32 -r1.33 src/libexec/telnetd/state.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
