Re: Buffer Copy without Checking Size of Input (CVE-2016-6559)

[email protected] Wed, 07 Dec 2016 08:59:09 +0100

Newsgroups	gmane.os.netbsd.devel.security
Message-ID	<[email protected]>

> I just noticed this post:
> https://www.kb.cert.org/vuls/id/548487
> ...
> Is someone working on this?

The side-by-side view of yesterdays fix in FreeBSD looks like this:

https://svnweb.freebsd.org/base/head/lib/libc/net/linkaddr.c?r1=288045&r2=309639

and their original version was quite similar to the one in NetBSD.

Kai-Uwe