Re: telnet: Handle integer overflow gracefully.

Erik Auerswald <[email protected]> Sun, 25 Aug 2024 14:52:20 +0200
Newsgroups gmane.comp.gnu.inetutils.bugs
Message-ID <[email protected]>
Hi,

On Fri, Aug 23, 2024 at 10:56:30PM -0700, Collin Funk wrote:
> 
> I've pushed the attached patch removing an integer overflow from telnet.

Thanks!  Should this be added to NEWS?

> The overflow occurs went sending 'send dont <value>' but the value
> exceeds INT_MAX.

'send dont <value>' is a "hidden" command, i.e., it is not shown in the
output of 'send ?', because the 'help' string is NULL (see the definition
of Sendlist[] in telnet/commands.c).  Does someone know the reason to
hide this command (and similar ones) from the online help?

Br,
Erik