Re: [PATCH 3/3] telnet: Avoid command evaluation crashes.

2022-09-04 Thread Erik Auerswald
Hi Guillem, On 03.09.22 20:08, Guillem Jover wrote: [ Removed Erik from To, as last time my mail was rejected by the mail server, and might then not get delivered by mailman as duplicate. ] :-( I have sent this email to bug-inetutils@gnu.org only to avoid this kind of problem. You might

Re: TFTP client crash seems to be caused by missing bounds check in makeargv()

2022-09-04 Thread Erik Auerswald
Hi, On 04.09.22 17:34, Erik Auerswald wrote: On 03.09.22 19:07, Erik Auerswald wrote: On Sat, Sep 03, 2022 at 05:39:45PM +0200, Simon Josefsson wrote: [...] did you notice some fuzzing report that wasn't fixed? [...] * Problems found in tftp (the code did not change since the report):    *

TFTP client crash seems to be caused by missing bounds check in makeargv()

2022-09-04 Thread Erik Auerswald
Hi, On 03.09.22 19:07, Erik Auerswald wrote: On Sat, Sep 03, 2022 at 05:39:45PM +0200, Simon Josefsson wrote: [...] did you notice some fuzzing report that wasn't fixed? I think the following reports have not yet been addressed: I do intend to look into these issues, but I cannot say