Re: Buffer overflow in the StringQuotedWord() function

--=-BfZhtOM9F1EvHoW9Q7Td
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

William Bader p=C3=AD=C5=A1e v =C4=8Ct 22. 10. 2020 v 22:55 +0000:
> The attached patch should fix both of the CVEs.
> The one in StringQuotedWord was more complicated because it was due to a =
string longer than MAX_BUFF, and when I fixed the access there, other place=
s had errors.
> The one in srcnext needed only an extra test in a loop.
> I tested the manual in doc/user before and after, and the only difference=
s seemed to be places that embedded the current time.

https://build.opensuse.org/request/show/843612 posted to
OpenSUSE/Factory. Tom Callway (spot, maintainer of lout on
Fedora) has been notified.

Best,

Mat=C4=9Bj

--=20
https://matej.ceplovi.cz/blog/, Jabber: [email protected]
GPG Finger: 3C76 A027 CA45 AD70 98B5  BC1D 7920 5802 880B C9D8
=20
My life has been full of terrible misfortunes most of which never
happened.
    -- Michel de Montaigne

--=-BfZhtOM9F1EvHoW9Q7Td
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
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=OTyD
-----END PGP SIGNATURE-----

--=-BfZhtOM9F1EvHoW9Q7Td--