Erik Auerswald <auers...@unix-ag.uni-kl.de> writes: > https://github.com/openbsd/src/blob/master/usr.bin/telnet/commands.c > > The 'Sendlist[]' there also has no 'help' string for 'dont' and similar > commands. The 'send_help()" function also omits commands without a > 'help' string. > > This code also seems to have the same integer overflow as fixed by > Collin's patch, it at least looks similar to our previous version.
Yes, the OpenBSD one has the same overflow. Thanks for the link. I'll send a diff to them. Collin
