Subject: Re: bin/36997: ping doesn't verify limits
To: None <gnats-admin@netbsd.org, netbsd-bugs@netbsd.org, zafer@aydogan.de>
From: David Laight <david@l8s.co.uk>
List: netbsd-bugs
Date: 09/17/2007 20:20:06
The following reply was made to PR bin/36997; it has been noted by GNATS.

From: David Laight <david@l8s.co.uk>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: bin/36997: ping doesn't verify limits
Date: Mon, 17 Sep 2007 21:17:22 +0100

 On Mon, Sep 17, 2007 at 10:15:00AM +0000, zafer@aydogan.de wrote:
 > >Number:         36997
 > >Category:       bin
 > >Synopsis:       ping doesn't verify limits
 ...
 > I think I found a bug in ping.
 > 
 > When playing around with ping, I noticed that there is no sufficient
 > verification for limits for the options -i, -l and -w.
 ...
 
 There is a general statement in the SUS that command line utilities are
 not required to perform numeric overflow tests on command line arguments.
 There is probably a proviso that the erronous values don't have any
 nasty side effects (eg buffer overruns).
 
 Whether this should apply to ping is another matter.
 
 	David
 
 -- 
 David Laight: david@l8s.co.uk