[Bug 418176] Re: gw6c crashes with buffer overflow on start

[Philippe Gauthier]

This is the same problem as in bug #323288 that has been re-imported
with the change from tspc to gw6c.

The call to inet_addr (3) is stored in a unsigned long, which length is
passed to memcpy. Since the destination is strictly 32-bit long, when
the code is run on a 64-bit platform, the size of unsigned long is
64-bit, and a buffer overflow occurs.

-- 
gw6c crashes with buffer overflow on start
https://bugs.launchpad.net/bugs/418176
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs