CVS commit: [netbsd-4-0] src/dist/ntp/ntpd

[Soren Jacobsen <snj%netbsd.org@localhost>]

Module Name:    src
Committed By:   snj
Date:           Tue May 26 05:16:16 UTC 2009

Modified Files:
        src/dist/ntp/ntpd [netbsd-4-0]: ntp_crypto.c

Log Message:
Pull up following revision(s) (requested by mrg in ticket #1320):
        dist/ntp/ntpd/ntp_crypto.c: revision 1.15
Fix CVE-2009-1252: Buffer overflow in ntpd crypto code. A remote
attacker can send a specially constructed request packet that would
overflow the sprintf()'ed buffer causing ntpd to crash.


To generate a diff of this commit:
cvs rdiff -u -r1.10.4.1 -r1.10.4.1.2.1 src/dist/ntp/ntpd/ntp_crypto.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.