search for: cdfunc

This is to announce that XMCD 2.1 patchlevel 0 has been released which fixes all of the issues previously raised by David Meltzer. It also contains a number of other minor feature and functionality enhancements. The new version may be obtained via the xmcd web page at: http://sunsite.unc.edu/~cddb/xmcd/ Users of xmcd with older versions are encouraged to upgrade. -Ti -- \\ // XMCD - Motif CD

...ditional security holes in xmcd due to the limited nature of my examination of the code; to provide some level of assurance would take a far more detailed examination that I simply can not devote the time to achieve for a non-critical piece of code such as xmcd. The offending line of code is in cdfunc.c in the cd_init() function: sprintf(titlestr, "%s %d", app_data.main_title, app_data.devnum); The titlestr is defined to be char titlestr[STR_BUF_SZ]. The string app_data.main_title is read from the XMcd resource file which will be read from a user''s home directory. A user ca...