[Rpm-maint] [rpm-software-management/rpm] Harden against crafted inputs (#1471)
Demi Marie Obenour
notifications at github.com
Fri Jan 15 11:19:15 UTC 2021
> I still haven't seen a single reproducer. Please make them available for the cases you have them - like said I need to prioritize. I initially thought the newly created individual PR's were those, but clearly that's not the case.
I can create a reproducer for the integer overflow which gets caught by UBSan, but the others I haven’t made a reproducer for, largely because I don’t have good tooling for writing crafted RPM files. This is also something I am doing in my spare time, so my time is limited.
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1471#issuecomment-760882761
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20210115/b05a6f03/attachment.html>
More information about the Rpm-maint
mailing list