[tin-dev] [PATCH] guard get_only_respcode(strtol()) against \0
Urs Janßen
urs at tin.org
Thu Nov 5 20:13:59 CET 2015
shouldn't show up the real world but was found with
zzuf -p 119 -n -E'.' -r 0.01 -P '\n' -R '\x00-\x1f\x7f-\xff' -b4- tin -r[..]
=== modified file 'src/nntplib.c'
--- src/nntplib.c 2015-11-01 17:07:01 +0000
+++ src/nntplib.c 2015-11-05 18:47:22 +0000
@@ -1745,7 +1745,7 @@
put_server(last_put);
ptr = tin_fgets(FAKE_NNTP_FP, FALSE);
- if (tin_errno) {
+ if (tin_errno || ptr == NULL) {
# ifdef DEBUG
if (debug & DEBUG_NNTP)
debug_print_file("NNTP", "<<<%sError: tin_errno <> 0", logtime());
More information about the tin-dev
mailing list