Re: Gnuserv

[John Wiegley]

>>>>> On Sun Oct 28, Gerd writes:

> They are now also in the pretest directory on alpha

>   gnuserv-2.0beta.tar.gz gnuserv-2.1alpha.tar.gz

Please include this patch to 2.1alpha, if you get a chance.  There is
a buffer overflow bug in that version.

John

--- gnuserv.c.orig      Wed May 10 16:53:32 2000
+++ gnuserv.c   Mon May 21 21:59:37 2001
@@ -113,7 +113,7 @@
      struct msgbuf **msgpp;
 {
   key_t key;                   /* messge key */
-  char buf[GSERV_BUFSZ];       /* pathname for key */
+  char buf[GSERV_BUFSZ+1];     /* pathname for key */
 
   sprintf(buf,"/tmp/gsrv%d",(int)geteuid());
   creat(buf,0600);
@@ -149,7 +149,7 @@
      struct msgbuf *msgp;      /* message buffer */
 {
   struct msqid_ds msg_st;      /* message status */
-  char buf[GSERV_BUFSZ];
+  char buf[GSERV_BUFSZ+1];
   int len;                     /* length of message / read */
   int s, result_len;            /* tag fields on the response from emacs */
   int offset = 0;
@@ -253,7 +253,7 @@
 void echo_request(s)
 int s;                         /* socket */
 {
-  char buf[GSERV_BUFSZ];
+  char buf[GSERV_BUFSZ+1];
   int len;
 
   printf("%d ",s);