Debian Patches
Status for bird3/3.4.0-1
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| commit_b818218f | commit b818218f78655096354ebfe1e74cf1a4cdda0e14 Lib: Fix stack overflow in bt_fmt_bytestr() bt_fmt_bytestr() allocates len + 1 bytes but writes two hex digits per byte plus a terminating NUL, overflowing the alloca() buffer. The formatter runs for every test case, not only on failure. On x86_64, alloca's 16-byte rounding usually hides the overflow; on s390x it smashes the stack and t_bstrhextobin/t_bstrbintohex fail. Allocate 2 * len + 1 bytes and print with %02x, so every byte is exactly two digits (the old %hx also dropped leading zeros). Target: patch Fixes: 3567ebc03 diff --git a/lib/strtoul_test.c b/lib/strtoul_test.c index 788f214d2..573857653 100644 |
Robert Scheck <bird@robert-scheck.de> | no | 2026-10-13 | ||
| adapt_version_script | adapt the version generator script for the Debian packaging | Marco d'Itri <md@linux.it> | not-needed |
All known versions for source package 'bird3'
- 3.4.0-1 (forky, sid)
- 3.3.2-1~bpo13+1 (trixie-backports)
- 3.1.7-0+deb13u1 (trixie-security, trixie)