Subversion Repositories

?revision_form?Rev ?revision_input??revision_submit??revision_endform?

Rev 53 | Go to most recent revision | Blame | Compare with Previous | Last modification | View Log | RSS feed

Author: Matthias Scheler <tron@netbsd.org>
Description: Fix an abort() caused by miscalculating the size of an internal buffer.
 This can crash applications using "libspf2" (e.g. "milter-greylist")
 in an e-mail gets delivered via SMTP over IPv6 depending on the
 remote machine's IPv6 address.

--- a/src/libspf2/spf_expand.c  2008-11-03 21:29:00.000000000 +0000
+++ b/src/libspf2/spf_expand.c  2009-09-08 11:27:52.000000000 +0100
@@ -245,7 +245,7 @@
                case PARM_CLIENT_IP:            /* SMTP client IP                               */
 #ifdef COMPUTE
                        if (compute_length) {
-                               len = sizeof(ip6_buf);
+                               len = sizeof(ip6_rbuf);
                                if (d->dv.url_encode)
                                        len *= 3;
                                buflen += len;