FreeTDS Development Group

[ZIGLIO Frediano <Frediano.Ziglio AT vodafoneomnitel.it>]

> 
> Hi all.
> 
> I posted patch 573551 on sourceforge.
> This patch add tds7 read login function in .../src/server/login.c
> 
> chedn
> 
This patch contain a lot of possible buffer overflow (see call to strcpy and
tds_get_n for string). Also you ignore position for strings. 

freddy77

=================================
"STRICTLY PERSONAL AND CONFIDENTIAL

This message may contain confidential and proprietary material for the sole
use of the intended recipient. Any review or distribution by others is
strictly prohibited. If you are not the intended recipient please contact
the sender and delete all copies.
The contents of this message that do not relate to the official business of
our company shall be understood as neither given nor endorsed by it."

=================================