Re: telnet: Handle integer overflow gracefully.
Collin Funk <[email protected]> Sun, 25 Aug 2024 12:17:45 -0700
| Newsgroups | gmane.comp.gnu.inetutils.bugs |
|---|---|
| Message-ID | <[email protected]> |
Erik Auerswald <[email protected]> writes: > https://github.com/openbsd/src/blob/master/usr.bin/telnet/commands.c > > The 'Sendlist[]' there also has no 'help' string for 'dont' and similar > commands. The 'send_help()" function also omits commands without a > 'help' string. > > This code also seems to have the same integer overflow as fixed by > Collin's patch, it at least looks similar to our previous version. Yes, the OpenBSD one has the same overflow. Thanks for the link. I'll send a diff to them. Collin