Closed dankamongmen closed 4 years ago
This is from the snprintf() conversion in outcurses breaking the many, many bprefix()
operations working with PREFIXSTRLEN + 1 buffers. Replacing them with BPREFIXSTRLEN + 1 "works" but all the UI was clearly designed for one fewer character, hrmmm....
There's a fix we need to pick up from outcurses 0.0.5, updated configure.ac and README.md.
I've cut a new Arch release (1.1.3-3) which has this fix, but I need to put up new Debian binaries.
In growlight-readline, on schwarzgerat, using the same USB key referenced in #61 , I can get buffer overflow messages in two ways:
and (this does not require the USB device seen above at sdo)