New Netscape bug (in version 1.12)

sameer sameer at c2.org
Wed Oct 4 11:05:49 PDT 1995


> How do I decide what is too long?  For example, when tracking down buffer
> overflow problems for the security patch, we found an undocumented
> static buffer limit of 64 bytes for the hostname passed to gethostbyname()
> on IRIX.  Before we stumbled across this problem, we had a discussion
> about what length we should truncate host names to.  People thought
> that 128 characters was a reasonable limit, but it turned out that it
> was too long.


	Isn't there a resolver #define or something in limits.h called
MAXHOSTNAMELEN ? Something like that? (Perhaps not, but that's what I
recall..)

> latent bugs.  We are also beefing up our QA to try to find more
> of these types of bugs.
> 
	great!


-- 
sameer						Voice:   510-601-9777
Community ConneXion				FAX:	 510-601-9734
An Internet Privacy Provider			Dialin:  510-658-6376
http://www.c2.org (or login as "guest")			sameer at c2.org





More information about the cypherpunks-legacy mailing list