Bugtraq mailing list archives
Re: /tmp event logger
From: bst () INAME COM (bst () INAME COM)
Date: Mon, 16 Mar 1998 10:18:24 -0400
More buggy soft (check your systems): * Conquest Game (Multi-player, curses based, space warfare game.) ftp://sunsite.unc.edu/pub/Linux/games/strategy/ (the location has been changed, check it) The program is installed [2771] gid = conquest. There are so many potential overflow conditions in the code, here is one as an example: char conf_name[256]; char *homevar; ... if ((homevar = getenv("HOME")) == NULL) { clog("GetConf(): getenv(HOME) failed"); fprintf(stderr, "Can't get HOME environment variable. Exiting\n"); return(ERR); } sprintf(conf_name, "%s/%s", homevar, CONFIG_FILE); * LinCity Game (LinCity is an SVGALIB and X based city/country simulation game for Linux, Solaris 2.5, FreeBSD, HP_UX, AIX and IRIX are ALPHA at this time, but have. been reported to work - sometimes needing a tweak to the Makefile[s].) ftp://sunsite.unc.edu/pub/Linux/games/strategy ZzZZz: char s[100]; ... strcpy(s,getenv("HOME")); Good luck!
Current thread:
- Re: /tmp event logger bst () INAME COM (Mar 16)