Add forgotten patch in previous commit. Noticed by Gary Duzan. D'oh.

1 files changed, 83 insertions, 0 deletions

diff --git a/news/nntpclnt/patches/patch-ac b/news/nntpclnt/patches/patch-ac
new file mode 100644
index 00000000000..a3b72fddf92
--- /dev/null
+++ b/news/nntpclnt/patches/patch-ac
@@ -0,0 +1,83 @@
+$NetBSD: patch-ac,v 1.1 2004/04/08 12:32:55 cube Exp $
+
+--- postauth.c.orig	1994-08-11 23:37:52.000000000 +0200
++++ postauth.c
+@@ -31,7 +31,7 @@ char *response;
+ {
+ 	char authtype[NNTP_STRLEN];
+ 	int i, rcode;
+-	if((i = sscanf(response,"%d %s", rcode, authtype)) != 2)
++	if((i = sscanf(response,"%d %511s", &rcode, authtype)) != 2) /* 511 == NNTP_STRLEN-1 */
+ 		return(-1);
+ #ifdef AUTHSIMPLE
+ 	if (!strcasecmp(authtype,"SIMPLE"))
+@@ -54,7 +54,7 @@ int
+ authsimple(host)
+ char * host;
+ {
+-	char remote[256], user[16], pass[16];
++	char remote[256], user[256], pass[256];
+ 	char buf[BUFSIZ];
+ 	int i;
+ 
+@@ -69,7 +69,7 @@ char * host;
+ 		if (buf[0] == '#')
+ 			continue;
+ 		
+-		i = sscanf(buf,"%s %s %s", remote, user, pass);
++		i = sscanf(buf,"%255s %255s %255s", remote, user, pass);
+ 		/* malformed entry? */
+ 		if (i != 3)
+ 		{
+@@ -87,14 +87,14 @@ char * host;
+ 		return(-1);
+ 	}
+ 	
+-	sprintf(buf,"authinfo simple");
++	snprintf(buf,BUFSIZ,"authinfo simple");
+ 	if (converse(buf, sizeof(buf)) != CONT_AUTH)
+ 	{
+ 		fprintf(stderr,"%s\n", buf);
+ 		return(-1);
+ 	}
+ 	
+-	sprintf(buf,"%s %s", user,pass);
++	snprintf(buf,BUFSIZ,"%s %s", user,pass);
+ 	if (converse(buf, sizeof(buf)) != OK_AUTH)
+ 	{
+ 		fprintf(stderr,"%s\n", buf);
+@@ -110,7 +110,7 @@ extern FILE *passfile;
+ authold(host)
+ char *host;
+ {
+-	char remote[64], user[16], pass[16];
++	char remote[256], user[256], pass[256];
+ 	char buf[1024];
+ 	int i;
+ 
+@@ -124,7 +124,7 @@ char *host;
+ 	{
+ 		if (buf[0] == '#')
+ 			continue;
+-		i = sscanf(buf,"%s %s %s", remote, user, pass);
++		i = sscanf(buf,"%255s %255s %255s", remote, user, pass);
+ 		/* malformed entry? */
+ 		if (i != 3)
+ 		{
+@@ -141,14 +141,14 @@ char *host;
+ 		return(-1);
+ 	}
+ 	
+-	sprintf(buf,"authinfo user %s", user);
++	snprintf(buf,sizeof(buf),"authinfo user %s", user);
+ 	if (converse(buf, sizeof(buf)) != CONT_OLDAUTHD)
+ 	{
+ 		fprintf(stderr,"%s\n", buf);
+ 		return(-1);
+ 	}
+ 
+-	sprintf(buf,"authinfo pass %s", pass);
++	snprintf(buf,sizeof(buf),"authinfo pass %s", pass);
+ 	if (converse(buf, sizeof(buf)) != OK_OLDAUTH)
+ 	{
+ 		fprintf(stderr,"%s\n", buf);