Re: [Fwd: Help needed with bufferoverflow in cvs]

[Martin Schulze]

Matt Riechers wrote:
> Martin Schulze wrote:
> > 
> > > | it seems that cvs (version 1.10.7 from Debians stable repos) has a
> > > | bufferoverflow but I'm but sure if it's exploitable
> ....
> > klecker!joey(pts/15):~/tmp/webwml> cvs diff -C`perl -e "print 'a' x 300"`  
> > Makefile || echo noe
> ....
> > cvs server: invalid context length argument
> > Terminated with fatal signal 11
> 
> The current stable release of CVS (1.11.1p1) seems to have fixed this. It does
> not segfault on this command.

Edit the local file and it will.

Regards,

        Joey

-- 
No question is too silly to ask, but, of course, some are too silly
to answer.   -- Perl book