buffer overflow detected in bcrelay

--===============2466005500835624376==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="FhKpTYimqQF2+bfE"
Content-Disposition: inline


--FhKpTYimqQF2+bfE
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello,

Debian#765442 <https://bugs.debian.org/765442>:

| bcrelay:amd64 terminates immediatly with:
|=20
| # bcrelay -i vlan0108 -o vlan0104
| *** buffer overflow detected ***: bcrelay terminated

Obvious reason is the small value of
| #define MAX_IFLOGTOSTR 16
[ bcrelay.c:137 ]

that leads to a buffer overflow in iflistLogIToString, l.980 if
the interface name is somewhat longer and/or the integer values take
more than just one digit, for example

| vlan0108(1/11/6)

Not sure what a safe value should be. Interface names in Linux
appearently are limited to 15 octets, the number however might
theoretically take ten digits each, resulting in a MAX_IFLOGTOSTR
value of 50.

But perhaps there's a better way to deal with it.

    Christoph

Aside, I stumbled upon a typo in bcrelay.8, s/incomming/incoming/

--FhKpTYimqQF2+bfE
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=gseB
-----END PGP SIGNATURE-----

--FhKpTYimqQF2+bfE--


--===============2466005500835624376==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
Comprehensive Server Monitoring with Site24x7.
Monitor 10 servers for $9/Month.
Get alerted through email, SMS, voice calls or mobile push notifications.
Take corrective actions from your mobile device.
http://p.sf.net/sfu/Zoho
--===============2466005500835624376==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Poptop-server mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/poptop-server

--===============2466005500835624376==--