From nobody@FreeBSD.org  Fri Oct 28 21:29:51 2005
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3D85916A41F
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 28 Oct 2005 21:29:51 +0000 (GMT)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [216.136.204.117])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 0EA8243D46
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 28 Oct 2005 21:29:51 +0000 (GMT)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.13.1/8.13.1) with ESMTP id j9SLToUV089523
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 28 Oct 2005 21:29:50 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.13.1/8.13.1/Submit) id j9SLTom2089521;
	Fri, 28 Oct 2005 21:29:50 GMT
	(envelope-from nobody)
Message-Id: <200510282129.j9SLTom2089521@www.freebsd.org>
Date: Fri, 28 Oct 2005 21:29:50 GMT
From: Thijs Eilander <eilander@paranoid.nl>
To: freebsd-gnats-submit@FreeBSD.org
Subject: ifconfig coredumps when string is too long
X-Send-Pr-Version: www-2.3

>Number:         88159
>Category:       bin
>Synopsis:       ifconfig(8) coredumps when string is too long
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    brooks
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Oct 28 21:30:10 GMT 2005
>Closed-Date:    Wed Jan 11 05:56:54 GMT 2006
>Last-Modified:  Wed Jan 11 05:56:54 GMT 2006
>Originator:     Thijs Eilander
>Release:        FreeBSD 6.0RC1
>Organization:
none
>Environment:
FreeBSD router.paranoid.nl 6.0-RC1 FreeBSD 6.0-RC1 #6: Fri Oct 28 21:48:58 CEST 2005     root@:/usr/obj/usr/src/sys/GENERIC  i386   
>Description:

ifconfig coredumps when you enter a wepkey which is too long.
An hex key maybe 26 chars, when entering a key of 27 chars (or longer) ifconfig coredumps.

# ifconfig ural0 nwkey 1:0x12345678901234567890123456a
ifconfig: hexadecimal digits too long
Segmentation fault (core dumped)

>How-To-Repeat:
ifconfig ural0 nwkey 1:0x12345678901234567890123456a
>Fix:
              
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->patched 
State-Changed-By: brooks 
State-Changed-When: Fri Oct 28 21:57:31 GMT 2005 
State-Changed-Why:  
Fixed in HEAD. 

Note that nwkey 1:0x12345678901234567890123456 is invalid and sets 
all keys to 0x12345678901234567890123456 with 1 as the transmit 
key.  If you want to set key 1, you should really use the wepkey 
option. 


Responsible-Changed-From-To: freebsd-bugs->brooks 
Responsible-Changed-By: brooks 
Responsible-Changed-When: Fri Oct 28 21:57:31 GMT 2005 
Responsible-Changed-Why:  
Fixed in HEAD. 

Note that nwkey 1:0x12345678901234567890123456 is invalid and sets 
all keys to 0x12345678901234567890123456 with 1 as the transmit 
key.  If you want to set key 1, you should really use the wepkey 
option. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=88159 
State-Changed-From-To: patched->closed 
State-Changed-By: brooks 
State-Changed-When: Wed Jan 11 05:56:27 UTC 2006 
State-Changed-Why:  
Merged to RELENG_5 and RELENG_6. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=88159 
>Unformatted:
