Debian Patches
Status for bird2/2.20.0-1
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| commit_b818218f | commit b818218f78655096354ebfe1e74cf1a4cdda0e14 Lib: Fix stack overflow in bt_fmt_bytestr() bt_fmt_bytestr() allocates len + 1 bytes but writes two hex digits per byte plus a terminating NUL, overflowing the alloca() buffer. The formatter runs for every test case, not only on failure. On x86_64, alloca's 16-byte rounding usually hides the overflow; on s390x it smashes the stack and t_bstrhextobin/t_bstrbintohex fail. Allocate 2 * len + 1 bytes and print with %02x, so every byte is exactly two digits (the old %hx also dropped leading zeros). Target: patch Fixes: 3567ebc03 diff --git a/lib/strtoul_test.c b/lib/strtoul_test.c index 788f214d2..573857653 100644 |
Robert Scheck <bird@robert-scheck.de> | no | 2026-10-13 | ||
| adapt_version_script | adapt the version generator script for the Debian packaging | Marco d'Itri <md@linux.it> | not-needed |
All known versions for source package 'bird2'
- 2.20.0-1 (sid, forky)
- 2.17.5-0+deb13u1 (trixie, trixie-security)
- 2.0.12-7 (bookworm)
