Re: [bug #61722] Untrusted Pointer Dereference in domacro() at inetutils/ftp/domacro.c:186

Erik Auerswald <[email protected]> Sun, 25 Sep 2022 13:35:27 +0200

Newsgroups	gmane.comp.gnu.inetutils.bugs
Message-ID	<[email protected]>

Hi AiDai,

On Thu, Dec 23, 2021 at 08:54:16AM -0500, AiDai wrote:
> URL:
>   <https://savannah.gnu.org/bugs/?61722>
> [...]
> Details:
> 
> # Untrusted Pointer Dereference in domacro() at inetutils/ftp/domacro.c:186
> 
> ## Description
> 
> An Untrusted Pointer Dereference was discovered in domacro() at
> inetutils/ftp/domacro.c:186. The vulnerability causes a segmentation fault and
> application crash.
> 
> **version**
> 
> ```
> ./ftp --version
> ftp (GNU inetutils) 2.2.16-cf091
> [...]

Thanks for reporting this bug.  I have fixed this crash with git commit
ff4610963867a01bb56adcab2f95945d86216783
<https://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=ff4610963867a01bb56adcab2f95945d86216783>.

Kind regards,
Erik