Re: [PATCH 3/3] telnet: Avoid command evaluation crashes.

Guillem Jover <[email protected]>
Newsgroups gmane.comp.gnu.inetutils.bugs
Message-ID <[email protected]>
[ Removed Erik from To, as last time my mail was rejected by the mail
  server, and might then not get delivered by mailman as duplicate. ]

Hi!

On Sat, 2022-09-03 at 19:07:52 +0200, Erik Auerswald wrote:
> AFAIK the other fuzzer-based crash reports have already been addressed
> before the release of GNU Inetutils 2.3:

You might want to take a look at:

  <https://git.hadrons.org/cgit/debian/pkgs/inetutils.git/tree/debian/patches/0004-telnet-Add-checks-for-option-reply-parsing-limits.patch>

The implementations in the BSDs are probably worth checking for
similar old fixes.

Thanks,
Guillem
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.