News for hackers. Stuff that matters.

A comment on Heap-based buffer overflow in Sudo. Parent comment

Re:Heap-based buffer overflow in Sudo by ben_bai on Wednesday January 27, 2021 @05:32PM (#25935038)
The argv += optind; is a standard pattern. I have never considered argc=0 case to be possible. I need to read some more on this.

As for your second find. It already got fixed: https://marc.info/?l=openbsd-cvs&m=161176698927944&w=2

[ Parent | on HN ]

There are no comments on this comment yet.