[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Chicken-announce] [SECURITY] Fix buffer overrun in substring-index[

From: Moritz Heidkamp
Subject: Re: [Chicken-announce] [SECURITY] Fix buffer overrun in substring-index[-ci]
Date: Thu, 29 Jan 2015 18:51:34 +0100

On 12 January 2015 17:29 CET, Moritz Heidkamp wrote:

> the substring-index[-ci] procedures of the data-structures unit are
> vulnerable to a buffer overrun attack when passed an integer greater
> than zero as the optional START argument. This issue was fixed in master
> (25db851) and chicken-5 (63d0445) via the patch discussed at

This vulnerability was assigned CVE-2014-9651.

Kind regards,
The CHICKEN team

Attachment: signature.asc
Description: PGP signature

reply via email to

[Prev in Thread] Current Thread [Next in Thread]