Package: gnupg2
Version: 2.1.1
Severity: normal

in dirmngr/ldap.c on line 617, argv may be overflowed.

617: argv[argc++] = url;

a check is made on line 591 that checks to see whether argv is less than or 
email to 399, and if it does, exit.
But argv is char *argv[50], while argc is a normal int.
If argc is 398, it will pass that check.

Thanks,

-- 
-- Joshua Rogers <https://internot.info/>


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to