Re: NULL Pointer Dereference in setcmd () at commands.c:1152
Simon Josefsson via Bug reports for the GNU Internet utilities <[email protected]>
| Newsgroups | gmane.comp.gnu.inetutils.bugs |
|---|---|
| Message-ID | <[email protected]> |
Erik Auerswald <[email protected]> writes: >> A NULL Pointer Dereference was discovered in setcmd () at >> commands.c:1152. The vulnerability causes a segmentation fault and >> application crash. ... > The attached patch "inetutils-telnet-set_null_deref_fix.patch" fixes this > by rejecting a set argument with neither ct->handler nor ct->charp. Wonderful, thanks again for report and patch! https://git.savannah.gnu.org/gitweb/?p=inetutils.git;a=commitdiff;h=43ee2f01919cd1d0ecd8c1596d075aa8a54804d5 https://git.savannah.gnu.org/gitweb/?p=inetutils.git;a=commitdiff;h=9b4972fc95e741d94f9f0647bc9ff8b99bc445e0 /Simon
signature.asc
(application/pgp-signature, 255 B)
-----BEGIN PGP SIGNATURE----- iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYsdPQhQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFosxWAP48hzFtvpUcdPdORDAoBN7ucXrpEUoO 8D0rVQoyja8SUQD+MFGr1CwkLDhK8CoDOTfmGrQMlZgzxgPhyJRQXBFKkwU= =EgbK -----END PGP SIGNATURE-----