Package: oftc-hybrid Severity: grave Tags: security patch Hi
Please include the patch from DSA-1980-1, which fixes an integer underflow (patch attached). Cheers Steffen
--- ircd-hybrid-7.2.2.dfsg.2.orig/src/irc_string.c
+++ ircd-hybrid-7.2.2.dfsg.2/src/irc_string.c
@@ -103,7 +103,9 @@
}
else
*d++ = *src;
- ++src, --len;
+ if (len > 0) {
+ ++src, --len;
+ }
}
*d = '\0';
return dest;

