[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: New Netscape bug (in version 1.12)
> How do I decide what is too long? For example, when tracking down buffer
> overflow problems for the security patch, we found an undocumented
> static buffer limit of 64 bytes for the hostname passed to gethostbyname()
> on IRIX. Before we stumbled across this problem, we had a discussion
> about what length we should truncate host names to. People thought
> that 128 characters was a reasonable limit, but it turned out that it
> was too long.
Isn't there a resolver #define or something in limits.h called
MAXHOSTNAMELEN ? Something like that? (Perhaps not, but that's what I
recall..)
> latent bugs. We are also beefing up our QA to try to find more
> of these types of bugs.
>
great!
--
sameer Voice: 510-601-9777
Community ConneXion FAX: 510-601-9734
An Internet Privacy Provider Dialin: 510-658-6376
http://www.c2.org (or login as "guest") [email protected]