gethostent_r(3) potentially causes buffer overflow.

after PR/46454 fix, parsing /etc/hosts file by fgetln(3) instead of fgets(3). but misuse of fgetln(3) may causes buffer overflow.

netbsd-5 branch doesn't work name resolution by /etc/hosts . http://releng.netbsd.org/cgi-bin/req-5.cgi?show=1910

netbsd-6 have same problems but still works for the sake of rewriting fgetln(3) by getdelim(3). http://releng.netbsd.org/cgi-bin/req-6.cgi?show=1085

note that pullup request's fix is also insufficient and still have buffer overflow ;-<

Comments (3)