Misaligned address in function icmp_generic_decode with inetutils 2.8

Chase Knowlden <[email protected]> Sat, 23 May 2026 10:14:06 -0400
Newsgroups gmane.comp.gnu.inetutils.bugs
Message-ID <CA+pRyf73O1kUEi_Our8f4X6BNmbjYSnyMDum3117GPWYVjquKA@mail.gmail.com>
--000000000000c9088c06527cc201
Content-Type: multipart/alternative; boundary="000000000000c9088b06527cc2ff"

--000000000000c9088b06527cc2ff
Content-Type: text/plain; charset="UTF-8"

In inetutils 2.8, I hit an UBSan at the function icmp_generic_decode when
running the test suite for inetutils 2.8.

--000000000000c9088b06527cc2ff
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">In inetutils 2.8, I hit an UBSan at the function=C2=A0icmp=
_generic_decode when running the test suite for inetutils 2.8.</div>

--000000000000c9088b06527cc2ff--

--000000000000c9088c06527cc201
Content-Type: application/octet-stream; name="test-suite.log"
Content-Disposition: attachment; filename="test-suite.log"
Content-Transfer-Encoding: base64
Content-ID: <f_mpifhehb0>
X-Attachment-Id: f_mpifhehb0
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--000000000000c9088c06527cc201--