News for hackers. Stuff that matters.
Re:CVE-2021-27135: xterm flaw may allow remote code executio... by rurban on Sunday March 21, 2021 @05:47PM (#26534411)
The patch is still handwaving, and not doing proper boundschecks. https://github.com/ThomasDickey/xterm-snapshots/commit/82ba5...

Before he thought of a UTF-8 encode taking 4x the space, now he assumes 6x. This not a fix! A fix is to provide the destlen, and realloc if off bounds. Probably in a loop.

There are no comments on this comment yet.