Re: Two heap-buffer-overflow crashes in ncurses 6.1 - patch 20191012

[Hongxu(primary)]

Hi Thomas,

    Both crashes result from out-of-bound reads to strings. Indeed using "heap-buffer-overflow" is not precise.

Best Regards,

Hongxu

On Wed, Oct 16, 2019 at 5:49 AM Thomas Dickey <address@hidden> wrote:

On Tue, Oct 15, 2019 at 11:25:28PM +0800, Hongxu(primary) wrote:
> Hi,
>
>     As of ncurses 6.1 - patch 20191012, there are two crashes resulting
> from heap-buffer-overflow.

It helps to get the categorization correct - see

https://lists.gnu.org/archive/html/bug-ncurses/2019-10/msg00021.html

--
Thomas E. Dickey <address@hidden>
https://invisible-island.net
ftp://ftp.invisible-island.net