Update of bug #68680 (group groff):
Status: In Progress => Fixed
Privacy: Private => Public
Open/Closed: Open => Closed
_______________________________________________________
Follow-up Comment #9:
commit be37b22dfe0be1bd4d538b03cdcf8c62c8f10d02
Author: G. Branden Robinson <[email protected]>
Date: Tue Sep 29 01:09:09 2026 -0500
[hpftodit]: Regression-test Savannah #68680.
* src/utils/hpftodit/tests/avoids-heap-buffer-overflow.sh: Do it.
* src/utils/hpftodit/hpftodit.am (hpftodit_TESTS): Run test.
(TESTS, EXTRA_DIST): Wire `hpftodit_TESTS` into Automake test harness
and ship this and any future hpftodit test scripts.
Test fails at this commit.
commit cca6188a818375d42b450cb2877d61e289047fd5
Author: G. Branden Robinson <[email protected]>
Date: Tue Sep 29 00:25:00 2026 -0500
[hpftodit]: Fix Savannah #68680.
* src/utils/hpftodit/hpftodit.cpp (hp_msl_to_ucode_name)
(unicode_to_ucode_name): Prevent heap buffer overwrite by adequately
sizing buffer for the `u` character we prefix to a Unicode code point
identifier if the character is not unnamed.
Fixes <https://savannah.gnu.org/bugs/?68680>. Thanks to Pavol Sloboda
for the report and a reproducer. Problem appears to date back to commit
65a386ebce, 2003-12-27.
_______________________________________________________
Reply to this item at:
<https://savannah.gnu.org/bugs/?68680>
_______________________________________________
Message sent via Savannah
https://savannah.gnu.org/
signature.asc
Description: PGP signature
