Vuln:heap_buffer_overflow

吴雨峰 <[email protected]> Thu, 2 Jul 2026 16:52:49 +0800 (CST)
Newsgroups gmane.comp.lib.ncurses.bugs
Message-ID <[email protected]>
------=_Part_116348_751271401.1782982369333
Content-Type: multipart/alternative; 
	boundary="----=_Part_116350_895579937.1782982369333"

------=_Part_116350_895579937.1782982369333
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: base64
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------=_Part_116350_895579937.1782982369333
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64

PGRpdiBkYXRhLW50ZXM9Im50ZXNfbWFpbF9ib2R5X3Jvb3QiIHN0eWxlPSJsaW5lLWhlaWdodDox
Ljc7Y29sb3I6IzAwMDAwMDtmb250LXNpemU6MTRweDtmb250LWZhbWlseTpBcmlhbCI+PGRpdiBz
dHlsZT0ibWFyZ2luOjA7Ij4jIyBTdW1tYXJ5CjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+
QSBoZWFwIGJ1ZmZlciBvdmVyZmxvdyBleGlzdHMgaW4gZm10X2NvbXBsZXgoKSB3aGVuIHByb2Nl
c3NpbmcgYSBtYWxmb3JtZWQgdGVybWluZm8gc291cmNlIGZpbGUuIFRoZSBmdW5jdGlvbiBjb3Bp
ZXMgYSBzdHJpbmcgdXNpbmcgc3RybmNweSgpIHdpdGggYW4gb3Zlcmx5IGxhcmdlIGxlbmd0aCwg
Y2F1c2luZyBhbiBvdXTigJFvZuKAkWJvdW5kcyByZWFkIHBhc3QgdGhlIGVuZCBvZiBhIDU0NOKA
kWJ5dGUgYnVmZmVyIGFsbG9jYXRlZCBieSBfbmNfdGljX2V4cGFuZCgpLgo8L2Rpdj48ZGl2IHN0
eWxlPSJtYXJnaW46MDsiPiMjIFZ1bG5lcmFiaWxpdHkgRGV0YWlscwo8L2Rpdj48ZGl2IHN0eWxl
PSJtYXJnaW46MDsiPioqUHJvZ3JhbSoqOiB0aWMgKGZyb20gbmN1cnNlcykKPC9kaXY+PGRpdiBz
dHlsZT0ibWFyZ2luOjA7Ij4qKlZlcnNpb24qKjogNi42IAo8L2Rpdj48ZGl2IHN0eWxlPSJtYXJn
aW46MDsiPioqQ3Jhc2ggVHlwZSoqOiBoZWFwLWJ1ZmZlci1vdmVyZmxvdyAoQVNhbikKPC9kaXY+
PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij4qKlJvb3QgQ2F1c2UqKjogSW5zdWZmaWNpZW50IGJ1ZmZl
ciBzaXplIHdoZW4gZXhwYW5kaW5nIHRlcm1pbmZvIHN0cmluZyBjYXBhYmlsaXRpZXMg4oCTIF9u
Y190aWNfZXhwYW5kKCkgYWxsb2NhdGVzIGEgYnVmZmVyIGJhc2VkIG9uIHRoZSBvcmlnaW5hbCBz
dHJpbmcgbGVuZ3RoLCBidXQgbGF0ZXIgc3RybmNweSgpIGF0dGVtcHRzIHRvIGNvcHkgYSBsb25n
ZXIgZXhwYW5kZWQgc3RyaW5nLCBsZWFkaW5nIHRvIGFuIG92ZXLigJFyZWFkIGludG8gYWRqYWNl
bnQgaGVhcCBtZXRhZGF0YS4KPC9kaXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij4jI0FTQU4gcmVw
b3J0CjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KPC9kaXY+PGRpdiBzdHls
ZT0ibWFyZ2luOjA7Ij49PTMwMDAwNjQ9PUVSUk9SOiBBZGRyZXNzU2FuaXRpemVyOiBoZWFwLWJ1
ZmZlci1vdmVyZmxvdyBvbiBhZGRyZXNzIDB4NTE2MDAwMDAwZWEwIGF0IHBjIDB4NzNkYjQwY2Y3
ZWJiIGJwIDB4N2ZmYzZjMjQ1ZWMwIHNwIDB4N2ZmYzZjMjQ1NjY4CjwvZGl2PjxkaXYgc3R5bGU9
Im1hcmdpbjowOyI+UkVBRCBvZiBzaXplIDIgYXQgMHg1MTYwMDAwMDBlYTAgdGhyZWFkIFQwCjwv
ZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+Jm5ic3A7ICZuYnNwOyAjMCAweDczZGI0MGNmN2Vi
YSBpbiBzdHJuY3B5IC4uLy4uLy4uLy4uL3NyYy9saWJzYW5pdGl6ZXIvYXNhbi9hc2FuX2ludGVy
Y2VwdG9ycy5jcHA6NjEzCjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+Jm5ic3A7ICZuYnNw
OyAjMSAweDU2ZmIyNjI5MTEyYSBpbiBzdHJuY3B5X0RZTiAuLi9wcm9ncy9kdW1wX2VudHJ5LmM6
MTI3CjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+Jm5ic3A7ICZuYnNwOyAjMiAweDU2ZmIy
NjI5M2FhYyBpbiBmbXRfY29tcGxleCAuLi9wcm9ncy9kdW1wX2VudHJ5LmM6ODcyCjwvZGl2Pjxk
aXYgc3R5bGU9Im1hcmdpbjowOyI+Jm5ic3A7ICZuYnNwOyAjMyAweDU2ZmIyNjI5NWRhOCBpbiBm
bXRfZW50cnkgLi4vcHJvZ3MvZHVtcF9lbnRyeS5jOjExNzgKPC9kaXY+PGRpdiBzdHlsZT0ibWFy
Z2luOjA7Ij4mbmJzcDsgJm5ic3A7ICM0IDB4NTZmYjI2Mjk3ZTNkIGluIGR1bXBfZW50cnkgLi4v
cHJvZ3MvZHVtcF9lbnRyeS5jOjE1NTcKPC9kaXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij4mbmJz
cDsgJm5ic3A7ICM1IDB4NTZmYjI2MjdjYjU0IGluIG1haW4gLi4vcHJvZ3MvdGljLmM6MTAyNQo8
L2Rpdj48ZGl2IHN0eWxlPSJtYXJnaW46MDsiPiZuYnNwOyAmbmJzcDsgIzYgMHg3M2RiNDA4MmEx
YzkgaW4gX19saWJjX3N0YXJ0X2NhbGxfbWFpbiAuLi9zeXNkZXBzL25wdGwvbGliY19zdGFydF9j
YWxsX21haW4uaDo1OAo8L2Rpdj48ZGl2IHN0eWxlPSJtYXJnaW46MDsiPiZuYnNwOyAmbmJzcDsg
IzcgMHg3M2RiNDA4MmEyOGEgaW4gX19saWJjX3N0YXJ0X21haW5faW1wbCAuLi9jc3UvbGliYy1z
dGFydC5jOjM2MAo8L2Rpdj48ZGl2IHN0eWxlPSJtYXJnaW46MDsiPiZuYnNwOyAmbmJzcDsgIzgg
MHg1NmZiMjYyNzhlNDQgaW4gX3N0YXJ0ICgvaG9tZS94bXV0L3d5Zi9MTE0tb3B0aW9uRnV6ei9i
ZW5jaGxhdGVzdC9uY3Vyc2VzLWFzYW4vbmN1cnNlcy02LjYvcHJvZ3MvdGljKzB4MzhlNDQpIChC
dWlsZElkOiA4NmU5NmRkZWZkZTA3NTIxOTUzY2UwMDExNGFkOWRmYzZiMzFhZDA0KQo8L2Rpdj48
ZGl2IHN0eWxlPSJtYXJnaW46MDsiPjB4NTE2MDAwMDAwZWEwIGlzIGxvY2F0ZWQgMCBieXRlcyBh
ZnRlciA1NDQtYnl0ZSByZWdpb24gWzB4NTE2MDAwMDAwYzgwLDB4NTE2MDAwMDAwZWEwKQo8L2Rp
dj48ZGl2IHN0eWxlPSJtYXJnaW46MDsiPmFsbG9jYXRlZCBieSB0aHJlYWQgVDAgaGVyZToKPC9k
aXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij4mbmJzcDsgJm5ic3A7ICMwIDB4NzNkYjQwY2ZjNzc4
IGluIHJlYWxsb2MgLi4vLi4vLi4vLi4vc3JjL2xpYnNhbml0aXplci9hc2FuL2FzYW5fbWFsbG9j
X2xpbnV4LmNwcDo4NQo8L2Rpdj48ZGl2IHN0eWxlPSJtYXJnaW46MDsiPiZuYnNwOyAmbmJzcDsg
IzEgMHg1NmZiMjYyYTBkMjUgaW4gX25jX2RvYWxsb2MgLi4vbmN1cnNlcy8uL3RpbmZvL2RvYWxs
b2MuYzo1NAo8L2Rpdj48ZGl2IHN0eWxlPSJtYXJnaW46MDsiPiZuYnNwOyAmbmJzcDsgIzIgMHg1
NmZiMjYyYzIwZjkgaW4gX25jX3RpY19leHBhbmQgLi4vbmN1cnNlcy8uL3RpbmZvL2NvbXBfZXhw
YW5kLmM6ODYKPC9kaXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij4mbmJzcDsgJm5ic3A7ICMzIDB4
NTZmYjI2Mjk1ZDE5IGluIGZtdF9lbnRyeSAuLi9wcm9ncy9kdW1wX2VudHJ5LmM6MTE2OQo8L2Rp
dj48ZGl2IHN0eWxlPSJtYXJnaW46MDsiPiZuYnNwOyAmbmJzcDsgIzQgMHg1NmZiMjYyOTdlM2Qg
aW4gZHVtcF9lbnRyeSAuLi9wcm9ncy9kdW1wX2VudHJ5LmM6MTU1Nwo8L2Rpdj48ZGl2IHN0eWxl
PSJtYXJnaW46MDsiPiZuYnNwOyAmbmJzcDsgIzUgMHg1NmZiMjYyN2NiNTQgaW4gbWFpbiAuLi9w
cm9ncy90aWMuYzoxMDI1CjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+Jm5ic3A7ICZuYnNw
OyAjNiAweDczZGI0MDgyYTFjOSBpbiBfX2xpYmNfc3RhcnRfY2FsbF9tYWluIC4uL3N5c2RlcHMv
bnB0bC9saWJjX3N0YXJ0X2NhbGxfbWFpbi5oOjU4CjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjow
OyI+Jm5ic3A7ICZuYnNwOyAjNyAweDczZGI0MDgyYTI4YSBpbiBfX2xpYmNfc3RhcnRfbWFpbl9p
bXBsIC4uL2NzdS9saWJjLXN0YXJ0LmM6MzYwCjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+
Jm5ic3A7ICZuYnNwOyAjOCAweDU2ZmIyNjI3OGU0NCBpbiBfc3RhcnQgKC9ob21lL3htdXQvd3lm
L0xMTS1vcHRpb25GdXp6L2JlbmNobGF0ZXN0L25jdXJzZXMtYXNhbi9uY3Vyc2VzLTYuNi9wcm9n
cy90aWMrMHgzOGU0NCkgKEJ1aWxkSWQ6IDg2ZTk2ZGRlZmRlMDc1MjE5NTNjZTAwMTE0YWQ5ZGZj
NmIzMWFkMDQpCjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+U1VNTUFSWTogQWRkcmVzc1Nh
bml0aXplcjogaGVhcC1idWZmZXItb3ZlcmZsb3cgLi4vLi4vLi4vLi4vc3JjL2xpYnNhbml0aXpl
ci9hc2FuL2FzYW5faW50ZXJjZXB0b3JzLmNwcDo2MTMgaW4gc3RybmNweQo8L2Rpdj48ZGl2IHN0
eWxlPSJtYXJnaW46MDsiPlNoYWRvdyBieXRlcyBhcm91bmQgdGhlIGJ1Z2d5IGFkZHJlc3M6Cjwv
ZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+Jm5ic3A7IDB4NTE2MDAwMDAwYzAwOiBmYSBmYSBm
YSBmYSBmYSBmYSBmYSBmYSBmYSBmYSBmYSBmYSBmYSBmYSBmYSBmYQo8L2Rpdj48ZGl2IHN0eWxl
PSJtYXJnaW46MDsiPiZuYnNwOyAweDUxNjAwMDAwMGM4MDogMDAgMDAgMDAgMDAgMDAgMDAgMDAg
MDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAKPC9kaXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij4m
bmJzcDsgMHg1MTYwMDAwMDBkMDA6IDAwIDAwIDAwIDAwIDAwIDAwIDAwIDAwIDAwIDAwIDAwIDAw
IDAwIDAwIDAwIDAwCjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+Jm5ic3A7IDB4NTE2MDAw
MDAwZDgwOiAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMCAwMAo8
L2Rpdj48ZGl2IHN0eWxlPSJtYXJnaW46MDsiPiZuYnNwOyAweDUxNjAwMDAwMGUwMDogMDAgMDAg
MDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAgMDAKPC9kaXY+PGRpdiBzdHls
ZT0ibWFyZ2luOjA7Ij49Jmd0OzB4NTE2MDAwMDAwZTgwOiAwMCAwMCAwMCAwMFtmYV1mYSBmYSBm
YSBmYSBmYSBmYSBmYSBmYSBmYSBmYSBmYQo8L2Rpdj48ZGl2IHN0eWxlPSJtYXJnaW46MDsiPiZu
YnNwOyAweDUxNjAwMDAwMGYwMDogZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEg
ZmEgZmEgZmEgZmEKPC9kaXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij4mbmJzcDsgMHg1MTYwMDAw
MDBmODA6IGZhIGZhIGZhIGZhIGZhIGZhIGZhIGZhIGZhIGZhIGZhIGZhIGZhIGZhIGZhIGZhCjwv
ZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+Jm5ic3A7IDB4NTE2MDAwMDAxMDAwOiBmYSBmYSBm
YSBmYSBmYSBmYSBmYSBmYSBmYSBmYSBmYSBmYSBmYSBmYSBmYSBmYQo8L2Rpdj48ZGl2IHN0eWxl
PSJtYXJnaW46MDsiPiZuYnNwOyAweDUxNjAwMDAwMTA4MDogZmEgZmEgZmEgZmEgZmEgZmEgZmEg
ZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEKPC9kaXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij4m
bmJzcDsgMHg1MTYwMDAwMDExMDA6IGZhIGZhIGZhIGZhIGZhIGZhIGZhIGZhIGZhIGZhIGZhIGZh
IGZhIGZhIGZhIGZhCjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+U2hhZG93IGJ5dGUgbGVn
ZW5kIChvbmUgc2hhZG93IGJ5dGUgcmVwcmVzZW50cyA4IGFwcGxpY2F0aW9uIGJ5dGVzKToKPC9k
aXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij4mbmJzcDsgQWRkcmVzc2FibGU6ICAgICAgICAgICAw
MAo8L2Rpdj48ZGl2IHN0eWxlPSJtYXJnaW46MDsiPiZuYnNwOyBQYXJ0aWFsbHkgYWRkcmVzc2Fi
bGU6IDAxIDAyIDAzIDA0IDA1IDA2IDA3IAo8L2Rpdj48ZGl2IHN0eWxlPSJtYXJnaW46MDsiPiZu
YnNwOyBIZWFwIGxlZnQgcmVkem9uZTogICAgICAgZmEKPC9kaXY+PGRpdiBzdHlsZT0ibWFyZ2lu
OjA7Ij4mbmJzcDsgRnJlZWQgaGVhcCByZWdpb246ICAgICAgIGZkCjwvZGl2PjxkaXYgc3R5bGU9
Im1hcmdpbjowOyI+Jm5ic3A7IFN0YWNrIGxlZnQgcmVkem9uZTogICAgICBmMQo8L2Rpdj48ZGl2
IHN0eWxlPSJtYXJnaW46MDsiPiZuYnNwOyBTdGFjayBtaWQgcmVkem9uZTogICAgICAgZjIKPC9k
aXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij4mbmJzcDsgU3RhY2sgcmlnaHQgcmVkem9uZTogICAg
IGYzCjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+Jm5ic3A7IFN0YWNrIGFmdGVyIHJldHVy
bjogICAgICBmNQo8L2Rpdj48ZGl2IHN0eWxlPSJtYXJnaW46MDsiPiZuYnNwOyBTdGFjayB1c2Ug
YWZ0ZXIgc2NvcGU6ICAgZjgKPC9kaXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij4mbmJzcDsgR2xv
YmFsIHJlZHpvbmU6ICAgICAgICAgIGY5CjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+Jm5i
c3A7IEdsb2JhbCBpbml0IG9yZGVyOiAgICAgICBmNgo8L2Rpdj48ZGl2IHN0eWxlPSJtYXJnaW46
MDsiPiZuYnNwOyBQb2lzb25lZCBieSB1c2VyOiAgICAgICAgZjcKPC9kaXY+PGRpdiBzdHlsZT0i
bWFyZ2luOjA7Ij4mbmJzcDsgQ29udGFpbmVyIG92ZXJmbG93OiAgICAgIGZjCjwvZGl2PjxkaXYg
c3R5bGU9Im1hcmdpbjowOyI+Jm5ic3A7IEFycmF5IGNvb2tpZTogICAgICAgICAgICBhYwo8L2Rp
dj48ZGl2IHN0eWxlPSJtYXJnaW46MDsiPiZuYnNwOyBJbnRyYSBvYmplY3QgcmVkem9uZTogICAg
YmIKPC9kaXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij4mbmJzcDsgQVNhbiBpbnRlcm5hbDogICAg
ICAgICAgIGZlCjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+Jm5ic3A7IExlZnQgYWxsb2Nh
IHJlZHpvbmU6ICAgICBjYQo8L2Rpdj48ZGl2IHN0eWxlPSJtYXJnaW46MDsiPiZuYnNwOyBSaWdo
dCBhbGxvY2EgcmVkem9uZTogICAgY2IKPC9kaXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij49PTMw
MDAwNjQ9PUFCT1JUSU5HCjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+IyMjIFJvb3QgQ2F1
c2UKPC9kaXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij4xLmZtdF9lbnRyeSgpIGNhbGxzIF9uY190
aWNfZXhwYW5kKCkgdG8gZXhwYW5kIGEgdGVybWluZm8gc3RyaW5nIGNhcGFiaWxpdHksIHBhc3Np
bmcgdGhlIG9yaWdpbmFsIHN0cmluZy4gVGhlIGZ1bmN0aW9uIGFsbG9jYXRlcyBhIGJ1ZmZlciBv
ZiBzaXplIDU0NCBieXRlcyAoYmFzZWQgb24gdGhlIG9yaWdpbmFsIHN0cmluZyBsZW5ndGggcGx1
cyBzb21lIG1hcmdpbikgdmlhIHJlYWxsb2MoKS4KPC9kaXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7
Ij4yLkxhdGVyIGluIGZtdF9jb21wbGV4KCksIHRoZSBmdW5jdGlvbiBjb3BpZXMgYSBzdWJzdHJp
bmcgaW50byBhIGxvY2FsIGJ1ZmZlciB1c2luZyBzdHJuY3B5KCkgd2l0aCBhIGxlbmd0aCBkZXJp
dmVkIGZyb20gdGhlIGV4cGFuZGVkIHN0cmluZ+KAmXMgcGFyc2VkIHN0cnVjdHVyZS4gSG93ZXZl
ciwgZHVlIHRvIGEgbWFsZm9ybWVkIGlucHV0LCB0aGUgY2FsY3VsYXRlZCBsZW5ndGggZXhjZWVk
cyB0aGUgYWxsb2NhdGVkIGJ1ZmZlciBzaXplLgo8L2Rpdj48ZGl2IHN0eWxlPSJtYXJnaW46MDsi
PjMuc3RybmNweSgpIHJlYWRzIDIgYnl0ZXMgYmV5b25kIHRoZSBlbmQgb2YgdGhlIDU0NOKAkWJ5
dGUgcmVnaW9uLCBjYXVzaW5nIGEgaGVhcOKAkWJ1ZmZlcuKAkW92ZXJmbG93IHJlYWQgaW50byB0
aGUgZm9sbG93aW5nIGhlYXAgcmVkem9uZSAobWFya2VkIGZhIGluIHNoYWRvdyBieXRlcykuCjwv
ZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+IyMjIFZ1bG5lcmFibGUgQ29kZSAoZHVtcF9lbnRy
eS5jOjEyNykKPC9kaXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij5gYGBjCjwvZGl2PjxkaXYgc3R5
bGU9Im1hcmdpbjowOyI+X25jX1NUUk5DUFkoZHN0LSZndDt0ZXh0ICsgZHN0LSZndDt1c2VkLCBz
cmMsIG5lZWQgKyAxKTsKPC9kaXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij5gYGAKPC9kaXY+PGRp
diBzdHlsZT0ibWFyZ2luOjA7Ij4jI1Byb29mIG9mIENvbmNlcHQKPC9kaXY+PGRpdiBzdHlsZT0i
bWFyZ2luOjA7Ij4qKlBvQyBGaWxlKio6IHRpY19oZWFwX2J1ZmZlcl9vdmVyZmxvdwo8L2Rpdj48
ZGl2IHN0eWxlPSJtYXJnaW46MDsiPmh0dHBzOi8vZ2l0aHViLmNvbS9yYWluZDIwMDAxMDIwL1Bv
Yy9ibG9iL21haW4vdGljX2hlYXBfYnVmZmVyX292ZXJmbG93CjwvZGl2PjxkaXYgc3R5bGU9Im1h
cmdpbjowOyI+KipSZXByb2R1Y3Rpb24qKjoKPC9kaXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij5g
YGJhc2gKPC9kaXY+PGRpdiBzdHlsZT0ibWFyZ2luOjA7Ij50aWMgLWEgLWMgdGljX2hlYXBfYnVm
ZmVyX292ZXJmbG93CjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+YGBgCjwvZGl2PjxkaXYg
c3R5bGU9Im1hcmdpbjowOyI+IyMjQ3JlZGl0CjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+
WXVmZW5nIFd144CBWmhpamllIFpoYW5n44CBUWl6aGVuIFh1CjwvZGl2PjxkaXYgc3R5bGU9Im1h
cmdpbjowOyI+PGJyPjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+CjwvZGl2PjxkaXYgc3R5
bGU9Im1hcmdpbjowOyI+CjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+CjwvZGl2PjxkaXYg
c3R5bGU9Im1hcmdpbjowOyI+CjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+CjwvZGl2Pjxk
aXYgc3R5bGU9Im1hcmdpbjowOyI+CjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+CjwvZGl2
PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+CjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+Cjwv
ZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+CjwvZGl2PjxkaXYgc3R5bGU9Im1hcmdpbjowOyI+
CjwvZGl2PjwvZGl2Pg==
------=_Part_116350_895579937.1782982369333--

------=_Part_116348_751271401.1782982369333
Content-Type: application/octet-stream; name=tic_heap_buffer_overflow
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="tic_heap_buffer_overflow"

VEF8fHx8fHwgCmlzIGEgaWluaYggCSAgOmFzOmw9XEVbSFhFQS9BVDpjbT1cLk0kaSVwSFxcXFxc
XFxcUFxcgDcxPlBcXIA3JT5cXDIlZjslXFxcfFxcPH1dWVxcXIAoJWNjY2NjY2N7Y2NjY2NjY2Nj
Y2NjY0o7J1xcVFxcSlxcXFw7XFxcXFBcEIA3JT5cXFxcXDslXFxcXFxcXA==
------=_Part_116348_751271401.1782982369333--