stewart@seismo.UUCP (John Stewart) (12/09/83)
This is a repeat of a fix I reported about a year ago, but which apparently did not make it to "official" versions. It appears in .../tip/remcap.c (4.6 81/11/29), which is hacked from .../libtermlib/termcap.c (unnumbered and undated). The problem is that if the string `tcname' is not terminated with a colon, the indicated while loop will clobber one somewhere else in your stack. Note in passing, that the problem is rarely seen if keepers of /etc/remote and /etc/termcap are relatively fastidious in adhering to the proper format. John Stewart, Teledyne Geotech *** remcap.c Fri Dec 9 14:28:23 1983 --- remcap.c.bad Thu Jul 28 11:12:08 1983 *************** *** 168,174 return(1); strcpy(tcname,p+3); q = tcname; ! while (*q && *q != ':') q++; *q = 0; if (++hopcount > MAXHOP) { --- 168,174 ----- return(1); strcpy(tcname,p+3); q = tcname; ! while (q && *q != ':') q++; *q = 0; if (++hopcount > MAXHOP) {