Hi,
I am the NCO (package name nco) author/maintainer.
I am unsure how/if to respond to these Mayhem bug reports.
NCO is a set of command line operators written in C99.
When they receive incorrect input options, they die with
exit(EXIT_FAILURE), as recommended (I believe) by the C-standard.
Is
Hi Charlie,
Dying with exit(EXIT_FAILURE) would be fine. In the attached testcase
however, ncbo segfaults because of a null dereference. Here is the
backtrace when the crash is happening:
#0 0xb7a37ad6 in ?? () from /lib/i386-linux-gnu/i686/cmov/libc.so.6
#1 0xb7f9ed20 in nco_fl_mk_lcl () from
Thank you for explaining this.
Your Mayhem project is very useful!
Please continue to bombard NCO with unsanitized input.
Unfortunately I think you will find more bugs :)
My summary of the issues is:
Debian Mayhem project reported five bugs due to unsanitized input:
716127 (ncflint), 716128
Hi,
We found a crash in ncbo contained in the nco package. You are being
contacted because your are listed as one of the maintainer of nco.
We are planning to submit the bug to the Debian bug tracking system in two
weeks. We wanted to give you a heads-up, so that you some time to assess the
4 matches
Mail list logo
