uuxqt bug (long command lines) v7 + others

scw at cepu.UUCP scw at cepu.UUCP
Fri May 25 07:13:16 AEST 1984


There is a bug in uuxqt.c involving *LONG* mail paths, or long command lines;

    SYSTEMS Affected:
	v7, v7m, Ultrix-11(??), 2.8BSD, 2.9BSD(??); Anyone with v7 derived
	uucp (?probably);
    Symptoms:
	uuxqt (UUXQT) vanishes leaving LCK.XQT and  a 0 length core in
	/usr/spool/uucp or a real core file (depending on who actually invoked
	it and the permisions on /usr/lib/uuxqt) that has the C back frames
	scrogged.
    Cause:
	While parsing the command line the mail path (argument to rmail)
	tramples on the stack. Actually it gets copied to a char[] that is
	too short.
    Repeat by:
	Send a message with more that MAXFULLNAME (uucp.h) characters in the
	path. A system with this problem will be unable to pass the message on.
	  -or-
	Generate a bogus X.system1234 file with a long (>MAXFULLNAME) X line
	in it.  then manually invoke uuxqt with -x4 to watch it die with a
	segementation violation.
    Fix:
	change line ~~40 from:
	char xcmd[100];
	to:
	char xcmd[BUFSIZ];

	Change line ~~50 from:
	char *cmdp, prm[MAXFULLLNAME],*ptr;
	to:
	char *cmdp, prm[BUFSIZ],*ptr;

	This fix will allow command lines to be up to 511 char long.
-- 
Stephen C. Woods (VA Wadsworth Med Ctr./UCLA Dept. of Neurology)
uucp:	{ {ihnp4, uiucdcs}!bradley, hao, trwrb, sdcsvax!bmcg}!cepu!scw
ARPA: cepu!scw at ucla-locus       location: N 34 06'37" W 118 25'43"



More information about the Comp.bugs.2bsd mailing list