Re: A heap-buffer-overflow in another () at cmds.c:202

Erik Auerswald <[email protected]> Sun, 25 Sep 2022 14:47:35 +0200

Newsgroups	gmane.comp.gnu.inetutils.bugs
Message-ID	<[email protected]>

Hi,

On Sat, Dec 25, 2021 at 12:49:46PM +0800, ZFeiXQ wrote:
> ## Description
> 
> A heap-buffer-overflow in another () at cmds.c:202, The vulnerability causes a abort fault and application crash.
> 
> **version**
> 
> ```
> ./ftp--version
> 
> 
> ftp (GNU inetutils) 2.2
> [...]

Thanks for reporting this bug.  I have fixed this crash with git commit
9dd2ccb8de204e2333b7ffab90ded9f2178d64d8
<https://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=9dd2ccb8de204e2333b7ffab90ded9f2178d64d8>.

Kind regards,
Erik