- fix buffer overflow (ZH2003-25SA)

Changed files:
    whois-overflow.patch -> 1.1

diff --git a/whois-overflow.patch b/whois-overflow.patch
new file mode 100644 (file)
index 0000000..bfe4e52
--- /dev/null
+++ b/whois-overflow.patch
@@ -0,0 +1,11 @@
+--- ./whois.c.org      Sun Jun 15 18:36:52 2003
++++ ./whois.c  Thu Sep  4 16:06:57 2003
+@@ -78,7 +78,7 @@
+       }
+       if (strchr(ripeflagsp, ch)) {
+           for (p = fstring; *p; p++);
+-          sprintf(p--, "-%c %s ", ch, optarg);
++          snprintf(p--, sizeof(fstring), "-%c %s ", ch, optarg);
+           if (ch == 't' || ch == 'v' || ch == 'q')
+               nopar = 1;
+           continue;