gnats@openbsd.org - what is going on ?

[Tomasz Bojakowski <mad_(_at_)_pin_(_dot_)_pl>]

        Hi...

When I first used sendbug, and my report didn't reached the destination. I was
suprised, but I was told that it sometimes happens. However when I sent today
another report, and it happend again. I began to worry. What is going on there
?

So, if gnast_(_at_)_openbsd_(_dot_)_org (bugs) doesn't work, I'll post it here... 

System: 2.4 with patches
Architecture: i386

Firs (not realy important). It is possible to make an overflow in
/usr/bin/info. Just use info for reading manuals (ex.: info man). It should
display a manual, everything is great.. now, when you move coursor down, to
the "SEE ALSO" section, and just hit enter, without moving cursor on specyfic
postion, it should sig.fault and dump the core. When you move cursos on
specyfic man page, it works fine. Oh, end terminal is a bit "puzzled", type
reset (It's coused by curses libaries - not "cleanig" the screen, after
initializing curses) I've also noticed that OpenBSD 2.5 is also vurneable.

Second.: It is possible to "disable" login from console. Just when you want to
login, when you see "Login:" hit in some seuence arrows on keyboard (ex.: up,
down, down, up, left, right, right. - should be enought). Now should
"Password:" line show, but there will be only "ssword". From now, when you'll
try to type a login again, every character will be "capital letter". Hitting
"Caps Lock" won't help. 
sth. like this will be after "ps" from root.

 7365 C1  Ss+     0:00.03 login -p -- \^[[a\^[[b\^[[ 

HUP it, or just wait 300 seconds, and console should be ok, however the "bug"
is still there :>
 
Sorry for posting this stuff here, but as I said, there is something wrong
with sendbug...

        Tomasz Bojakowski

ps.: sorry for bad english ;>

/================="Don't get mad, get even."=================\
||              Tomasz "Mad Karrde" Bojakowski              ||
||   tel. +48603081163 , mad_(_at_)_pin_(_dot_)_pl , mad_(_at_)_anakata_(_dot_)_art_(_dot_)_pl    || 
\============================================================/