RE: 4.0.2 and CAN-2003-0972

>>>>> "Juergen" == Juergen Weigert <[email protected]> writes:

    Paul>> My colleague alert me of the of the following bug in
    Paul>> screen, it is still in the 4.0.2 code.  Maybe someone can
    Paul>> apply the patch?
    Paul>> 
    Paul>> http://www.securitytracker.com/alerts/2003/Nov/1008321.html

    Juergen> Wrong! 4.0.2 fixes CAN-2003-0972

So the patch in the link is not used?  I raised this issue because
the ansi.c still have the old statements:

     --- ansi.c.old  2003-11-15 18:04:12.000000000 +0200
     +++ ansi.c      2003-11-15 18:04:51.000000000 +0200
     @@ -559,7 +559,7 @@
                 {
                 case '0': case '1': case '2': case '3': case '4':
                 case '5': case '6': case '7': case '8': case '9':
     -             if (curr->w_NumArgs < MAXARGS)
     +             if (curr->w_NumArgs >= 0 && curr->w_NumArgs <
                   MAXARGS)
                     {
                       if (curr->w_args[curr->w_NumArgs] < 100000000)
                         curr->w_args[curr->w_NumArgs] =


 

------------------------ Yahoo! Groups Sponsor ---------------------~-->
Buy Ink Cartridges or Refill Kits for your HP, Epson, Canon or Lexmark
Printer at MyInks.com. Free s/h on orders $50 or more to the US & Canada.
http://www.c1tracking.com/l.asp?cid=5511
http://us.click.yahoo.com/mOAaAA/3exGAA/qnsNAA/NhFolB/TM
---------------------------------------------------------------------~->

Yahoo! Groups Links

To visit your group on the web, go to:
 http://groups.yahoo.com/group/gnu-screen/

To unsubscribe from this group, send an email to:
 [email protected]

Your use of Yahoo! Groups is subject to:
 http://docs.yahoo.com/info/terms/