Thanks David, but I was able to hack on it and use vsprintf in place
of vsnprintf. From what I can tell, it looks like the contents of the
buffer is written to the client file descriptor for every cli_print/
cli_error call, as opposed to just having all the print calls in a
callback buffer their data, and then flushing the entire buffer when
the callback is complete. That makes a buffer overflow much less
likely, I increased the buffer size from 1k to 4k. Even though I am
using vsprintf, which has no overflow indication, this means that I
would need a single cli_printf call to exceed 4k, which is highly
unlikely in our scenario.
As for the regexp stuff, it looks like its used for filtering, which
we don't need either, so I just commented that stuff out. From my
testing, so far, I haven't found any problems, all the base
functionality that we need seems to be working, so it looks like I'm
good to go.
Thanks...
On Feb 22, 7:57 pm, David Parrish <
dparr...@gmail.com> wrote:
> I'd suggest patching in somebody else's implementation of vsnprintf, perhaps
> the ulibc one:
http://sources.busybox.net/index.py/trunk/uClibc/libc/stdio/vsnprintf...
>
> Same suggestion for the regular expression library.
>
> On Sat, Feb 21, 2009 at 1:37 PM,
ron.iov...@gmail.com
> <
ron.iov...@gmail.com>wrote: