www.a00.de > tcpgroup > 1992 > msg00219
 

TCP-group 1992


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

small bug in gri 1.9c



Gerard copied my mailbox-gateway code from an older set of sources,
and didn't catch the bug i had left in there.
The gateway command is NOT protected per individual user, since the
check for privs is missing. (MBsecure still works)
Also, the R: line in forward.c has a small bug with @:call field
Diffs are given below to fix both...

Johan.
---------------

In MAILBOX.C

2405c2405,2409
<               if(Nrifaces[0].iface == NULLIF){
---
>         if(!(m->privs & NETROM_CMD)) {
>             tputs(Noperm);
>             return 0;
>         }
>         if(Nrifaces[0].iface == NULLIF){
2443c2447,2451
<               if((ifp = if_lookup(argv[1])) == NULLIF) {
---
>         if(!(m->privs & AX25_CMD)) {
>             tputs(Noperm);
>             return 0;
>         }
>         if((ifp = if_lookup(argv[1])) == NULLIF) {

In FORWARD.C

123c123
<                       usprintf(m->user,"R:%s @%s.%s [%s] %s #:%u Z:%s\n",
---
>             usprintf(m->user,"R:%s @:%s.%s [%s] %s #:%u Z:%s\n",

------------------------------





Document URL : http://www.a00.de/tcpgroup/1992/msg00219.php
Ralf D. Kloth, Ludwigsburg, DE (QRQ.software). < hostmaster at a00.de > [don't send spam]
Created 2004-11-12. Last modified 2004-11-12. Your visit 2024-11-24 01:18.20. Page created in 0.0174 sec.
 
[Go to the top of this page]   [... to the index page]