Fwd: freeport(1)

2022-10-01 Thread Alejandro Colomar
Hi, Bernd recommended me to consider inetutils for this program (see the forwarded mail), since net-tools is deprecated. Yes, it has a race condition by the nature of the port being free at the time the program prints it, but the kernel will not reuse it unless all other ports have been

Re: NULL Pointer Dereference in setnmap() at cmds.c:2303

2022-10-01 Thread Erik Auerswald
Hi AiDai, On Thu, Dec 23, 2021 at 08:16:31PM +0800, AiDai wrote: > ## Description > > A NULL Pointer Dereference was discovered in setnmap() at cmds.c:2303. The > vulnerability causes a segmentation fault and application crash. > > **version** > > ``` > ./ftp --version > ftp (GNU inetutils)

Re: fixing the ftp crashes found via fuzzer

2022-10-01 Thread Erik Auerswald
Hi, On 21.09.22 09:15, Simon Josefsson wrote: Erik Auerswald writes: I'll try to commit and push regression tests and fixes for the first, third, and fourth problem during the weekend. Thank you. What do you all think regarding recursive macros (the second problem)? Having an arbitrary

Re: fixing the ftp crashes found via fuzzer (was: Re: [PATCH 3/3] telnet: Avoid command evaluation crashes.)

2022-10-01 Thread Erik Auerswald
Hi, On 25.09.22 14:52, Erik Auerswald wrote: On Tue, Sep 20, 2022 at 11:11:06PM +0200, Erik Auerswald wrote: On Mon, Sep 19, 2022 at 10:31:15PM +0200, Erik Auerswald wrote: On Sat, Sep 03, 2022 at 07:07:52PM +0200, Erik Auerswald wrote: On Sat, Sep 03, 2022 at 05:39:45PM +0200, Simon