Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[SECURITY] Use HTTPS to resolve dependencies in Maven Build #1

Closed
wants to merge 1 commit into from
Closed

[SECURITY] Use HTTPS to resolve dependencies in Maven Build #1

wants to merge 1 commit into from

Commits on Feb 21, 2020

  1. Given that we have just checked vallen < len, it can never be the case 

    that vallen >= len + sizeof(rhostname).  This fixes the check so we
actually avoid overflowing the rhostname array.

Reported-by: Github Security Lab <[email protected]>
Signed-off-by: Paul Mackerras <[email protected]>
    @pwntester
    pwntester committed Feb 21, 2020
    Configuration menu
    Copy the full SHA
    d03b6b9 View commit details
    Browse the repository at this point in the history