[ntp:security] [Bug 3386] NTP-01-011 NTP: ntpq_stripquotes() returns incorrect Value (Pentest report 01.2017)

bugzilla-daemon at ntp.org bugzilla-daemon at ntp.org
Sun Feb 12 11:40:51 UTC 2017


http://bugs.ntp.org/show_bug.cgi?id=3386

Juergen Perlinger <perlinger at ntp.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
       Hours Worked|                            |1.5
             Status|IN_PROGRESS                 |READY

--- Comment #2 from Juergen Perlinger <perlinger at ntp.org> 2017-02-12 11:40:51 UTC ---
the repo is in
  psp.tp.org:~perlinger/ntp-stable-3386

Tried to fix this rather dickey implementation of 'ntpq_stripquotes()'. It
didn't even do what it promised in the comment over the body, and totally
ignored the given arguments for source and destination size. That's *beeeeep*
code, pardon my French.

-- 
Configure bugmail: http://bugs.ntp.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.


More information about the security mailing list