|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
From: Chris Kuethe (ckuethe_at_ualberta.ca)
Date: Sun Jan 12 2003 - 15:50:46 CST
On Mon, 30 Dec 2002, Theo de Raadt wrote:
> Everyone else out there who doesn't understand the conversation below,
> pay attention.
>
> This below is what happens when a buffer overflow is discovered by propolice,
> the gcc extension.
>
> If you see any of these happen in a system component, please mail us
> so that we can fix them. It could be in security software or not; we
> don't care. Tell us, so that we can fix these buffer overflows
> discovered by this gcc extension...
>
> They are only discovered at runtime..
>
> > * William Culler <william
neo.rr.com> [021230 18:30]:
> > > After upgrading my ?current system from a cvs update done last night, I find
> > > that dhcpd is core dumping on me.
> >
> > > dhcp: stack overflow in function subnet_inner_than
> >
> > This function is in the parser. Would you mind posting your config
> > file and someone can try to reproduce it? My limited testing can't
> > reproduce it.
i can reproduce this with -current as of 11am MDT today. i get the same
"stack overflow in function subnet_inner_than" error and the console just
does this:
# dhcpd
Internet Software Consortium DHCP Server 2.0pl5-OpenBSD
Copyright 1995, 1996, 1997, 1998, 1999 The Internet Software Consortium.
All rights reserved.
Please contribute if you find this software useful.
For info, please visit http://www.isc.org/dhcp-contrib.html
Abort
here's my config file:
#start of /etc/dhcpd.conf
subnet 24.86.200.0 netmask 255.255.252.0 { }
subnet 172.25.0.0 netmask 255.255.255.0 {
option routers 172.25.0.1;
range 172.25.0.32 172.25.0.254;
option domain-name-servers 24.70.95.195, 24.70.95.212, 129.128.5.233;
}
subnet 172.31.0.0 netmask 255.255.255.0 {
option routers 172.31.0.1;
range 172.31.0.32 172.31.0.254;
option domain-name "mainframe.cx";
option domain-name-servers 24.70.95.195, 24.70.95.212, 129.128.5.233;
}
#end of /etc/dhcpd.conf
--
Chris Kuethe, GCIA CISSP: Secure Systems Specialist - U of A CNS
office: 157 General Services Bldg. +1.780.492.8135
chris.kuethe
[pyxis.cns.]ualberta.ca
No trees were destroyed in the sending of this contaminant free message; we
do concede a significant number of electrons may have been inconvenienced.
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]