tcpdump mailing list archives

Automatic report from sources (tcpdump libpcap htdocs) between 06.01.2004 - 07.01.2004 GMT


From: "Automatic cvs log generator /tcpdump/bin/makelog" <mcr () sandelman ottawa on ca>
Date: Wed, 7 Jan 2004 05:06:31 -0500 (EST)

CVS log entries from 06.01.2004 (Tue) 10:05:26 - 07.01.2004 (Wed) 10:05:28 GMT
=====================================================
Summary by authors
=====================================================
Author: hannes
        File: tcpdump/CREDITS; Revisions: 1.91, 1.87.2.3
        File: tcpdump/print-isakmp.c; Revisions: 1.42, 1.36.2.6
        File: tcpdump/print-radius.c; Revisions: 1.24, 1.19.2.3

=====================================================
Combined list of identical log entries
=====================================================
Description:
bugfix from Jonathan Heusser <jonny () drugphish ch>

  The first critical piece of code is found in print-isakmp.c:332. The
  function rawprint() does not check its arguments thus it's easy for
  an attacker to pass a big 'len' or a bogus 'loc' leading to a
  segmentation fault in the for loop.

  The second bug is located in print-radius.c:471. The for loop of
  print_attr_string() is written in an unsafe manner. 'length'
  and 'data' should be checked.
Modified files:
        File: tcpdump/CREDITS; Revision: 1.91;
        Date: 2004/01/07 08:00:52; Author: hannes; Lines: (+1 -0)
        File: tcpdump/CREDITS; Revision: 1.87.2.3;
        Date: 2004/01/07 07:53:17; Author: hannes; Lines: (+1 -0)
        File: tcpdump/print-isakmp.c; Revision: 1.42;
        Date: 2004/01/07 08:00:51; Author: hannes; Lines: (+9 -1)
        File: tcpdump/print-isakmp.c; Revision: 1.36.2.6;
        Date: 2004/01/07 07:53:17; Author: hannes; Lines: (+9 -1)
        File: tcpdump/print-radius.c; Revision: 1.24;
        Date: 2004/01/07 08:00:52; Author: hannes; Lines: (+2 -2)
        File: tcpdump/print-radius.c; Revision: 1.19.2.3;
        Date: 2004/01/07 07:53:17; Author: hannes; Lines: (+2 -2)
=====================================================
Log entries
=====================================================
=====================================================
Summary of modified files
=====================================================
File: tcpdump/CREDITS
Revisions: 1.91, 1.87.2.3
Authors: hannes (+1 -0), hannes (+1 -0)
-------------------------------
File: tcpdump/print-isakmp.c
Revisions: 1.42, 1.36.2.6
Authors: hannes (+9 -1), hannes (+9 -1)
-------------------------------
File: tcpdump/print-radius.c
Revisions: 1.24, 1.19.2.3
Authors: hannes (+2 -2), hannes (+2 -2)
-- 
Automatic cron job from /tcpdump/bin/makelog
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe


Current thread: