Re: telnet: Handle integer overflow gracefully.

Collin Funk <[email protected]> Sun, 25 Aug 2024 12:17:45 -0700
Newsgroups gmane.comp.gnu.inetutils.bugs
Message-ID <[email protected]>
Erik Auerswald <[email protected]> writes:

> https://github.com/openbsd/src/blob/master/usr.bin/telnet/commands.c
>
> The 'Sendlist[]' there also has no 'help' string for 'dont' and similar
> commands.  The 'send_help()" function also omits commands without a
> 'help' string.
>
> This code also seems to have the same integer overflow as fixed by
> Collin's patch, it at least looks similar to our previous version.

Yes, the OpenBSD one has the same overflow. Thanks for the link.

I'll send a diff to them.

Collin