[Bug 246050] Buffer overflows in fortune's strfile, unstr and randstr

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sun May 3 14:29:51 UTC 2020


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=246050

--- Comment #2 from Shlomi Fish <shlomif at gmail.com> ---
An update: in addition, an integer overflow when calculating the percentages
was found:

https://github.com/shlomif/fortune-mod/commit/acd338098071bddfa1d21f87e1813727031428ea

It may or may not be exploitable.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list