[TriLUG] Nagios plugin check_http segmentation fault - potential for buffer overflow?

Ian Kilgore ian at trilug.org
Wed Nov 22 15:01:00 EST 2006


On Wed, Nov 22, 2006 at 02:38:13PM -0500, David McDowell wrote:
<snip bug report>

It looks like it is happening somewhere in base64()
plugins/check_http.c.  base64() doesn't like the string ':', or any
other one character string.

Line 485 in my version (1.4)

while (j < len - 2) {

len is 1.  This causes it to loop for a long time and do lots of silly
things.
-- 
Ian Kilgore
echo "pfxz at pfxz.trw" | tr pzfwxt ikagno
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: <http://www.trilug.org/pipermail/trilug/attachments/20061122/84fa6e7d/attachment.pgp>


More information about the TriLUG mailing list