Skip to content
  • Thomas Markwalder's avatar
    [#182] Corrected CVE: CVE-2021-25217 · 3d53b2f2
    Thomas Markwalder authored and Wlodzimierz Wencel's avatar Wlodzimierz Wencel committed
    Addressed buffer overwrite in parse_X()
    
    Added Release Note
    
    common/parse.c
        parse_X() - reworked to avoid buffer overwrite on
        over-sized hex literals
    
    common/tests/option_unittest.c
        ATF_TC_BODY(parse_X) - new test which verifies
        parse_X() logic.
    3d53b2f2