Re: HEAP BUFFER OVERFLOW BUG

--KyUuYgA//u3GGPk+
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

V=C2=A0Sat, Jan 20, 2024 at 05:59:48PM +0530,=C2=A0abhishek singh napsal(a):
> ### Description
> heap-buffer-overflow indent/src/output.c:319 in set_buf_break.
> CVE-2023-40305 has heap-buffer-overflow in search_brace, but this bug is =
in
> set_buf_break in indent/src/output.c
> POC file is attached
>=20
For your information, this bug was assigned a CVE-2024-0911 identifier by R=
ed
Hat CNA.

-- Petr

--KyUuYgA//u3GGPk+
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEE4/QvzhVoMKgDWObpT9GuwzZa978FAmWzcZMACgkQT9GuwzZa
97/XFxAA5nNpeOEdc3b2o+4mHpo74AMjMC+frfWBjHEVXusXOM86CSwpZS1uV/df
W2Xq3/LFheKhORVELcUqhqQvQ+EvXSAPr/W/mNJQhu5skdHC/X9RpVd/qRjlqmHc
J/RC7lPcOXZI+pNIQlEsTox6raVTyHypzfgiPaIifcsqu2kq9MEIDagA29KRNISI
Qcej4XxHyDG56XwvZCAKiYFtajRBI50cf4NrreWnXwKo/6XB1yGFtuzw02pJXHHu
si4XDpUUhMC9qiRN0BWgQAYezlphivAenGmBK5ILiVHjRvii1CfCfhUBQghZSFNN
2u+bqLLO4Vt9pz4b8hWRyISJDb7dwoj3Dwla5FXhwJf9hteBO9EvKJi3DRPYGdUH
5fL7+pMj/VdiNPZeKhZQ2gHWeyErzeE8mJ5BSMLWz5dbLBqNU1Kq/QGP0Jry3KJn
GaLcpBiYgN86IC12ExGlaeBkUVo+bK7qiIYZzqnWNy5zC+POb2YvOO0IEJnGa6fy
T6YmUdR+yxC++rgi5d8xqxNIzetRPSgB8X90b96Iynio+TtV7C4QMdvnhbwoQ0Lz
KX6knAun7AC1mBnTObCixpIWnBfX2IQxqZCRbO2kFo+paRaK7I+npPPJWm2gw2GT
Q3IebTBpUFNTvnouxsTL4iV5n5TGL7Lsddq3M6kFJacaZJ4qpwk=
=YGi7
-----END PGP SIGNATURE-----

--KyUuYgA//u3GGPk+--