[Snort-devel] patch for [ snort-Bugs-1078081 ] Integer parsing in xatou(), sfthreshold.c

Jeff Nathan jeff at ...835...
Wed Dec 8 00:09:02 EST 2004


I've attached a patch for both HEAD and 2_3 to fix this.

-Jeff

-------------- next part --------------
A non-text attachment was scrubbed...
Name: sfthreshold_HEAD.diff.gz
Type: application/x-gzip
Size: 452 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20041208/4da6d5eb/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sfthreshold_2_3.diff.gz
Type: application/x-gzip
Size: 449 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20041208/4da6d5eb/attachment-0001.bin>
-------------- next part --------------


Begin forwarded message:

> From: "SourceForge.net" <noreply at ...12...>
> Date: December 2, 2004 9:11:38 PM EST
> To: noreply at ...12...
> Subject: [Snort-devel] [ snort-Bugs-1078081 ] Integer parsing in  
> xatou(), sfthreshold.c
>
> Bugs item #1078081, was opened at 2004-12-03 02:11
> Message generated for change (Tracker Item Submitted) made by Item  
> Submitter
> You can respond by visiting:
> https://sourceforge.net/tracker/? 
> func=detail&atid=103357&aid=1078081&group_id=3357
>
> Category: None
> Group: None
> Status: Open
> Resolution: None
> Priority: 5
> Submitted By: NN Poster (nnposter)
> Assigned to: Nobody/Anonymous (nobody)
> Summary: Integer parsing in xatou(), sfthreshold.c
>
> Initial Comment:
> Routine xatou() in sfthreshold.c does not seem to handle
> a case where the input integer string is completely
> unparseable, i.e. the first non-white-space character is
> not a digit. In this case errno does not necessarily have
> to be set, which throws off the parsing error test in the
> routine. (One example is Visual C++ 6.0)
>
>
> Example:
>
> config threshold: memcap zzz
> ...will cause snort to believe that memcap is 0 and then
> crash later on DIV 0 error when processing thresholding
> rules.
>
>
> The attached patch against 2.2 should resolve the issue.
>
>
> ----------------------------------------------------------------------
>
> You can respond by visiting:
> https://sourceforge.net/tracker/? 
> func=detail&atid=103357&aid=1078081&group_id=3357
>
>
> -------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT Products from real  
> users.
> Discover which products truly live up to the hype. Start reading now.
> http://productguide.itmanagersjournal.com/
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
>

--
http://cerberus.sourcefire.com/~jeff       (DSA key id 6923D3FD)
Part-time software mechanic, full-time daredevil!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20041208/4da6d5eb/attachment.sig>


More information about the Snort-devel mailing list