Re: August Report

To: Hugo Lefeuvre <hle@debian.org>
Cc: debian-lts@lists.debian.org
Subject: Re: August Report
From: Raphael Hertzog <hertzog@debian.org>
Date: Tue, 5 Sep 2017 10:30:03 +0200
Message-id: <[🔎] 20170905083003.6iscm5zs7yrzkeb5@home.ouaza.com>
Mail-followup-to: Raphael Hertzog <hertzog@debian.org>, Hugo Lefeuvre <hle@debian.org>, debian-lts@lists.debian.org
In-reply-to: <[🔎] 20170903103117.sccfp4pakoeubkub@hle-laptop.local>
References: <[🔎] 20170903103117.sccfp4pakoeubkub@hle-laptop.local>

On Sun, 03 Sep 2017, Hugo Lefeuvre wrote:
>    These CVEs are especially difficult to reproduce because wheezy's gcc
>    doesn't have asan and reproduction conditions might require a specific
>    setup.

FWIW, I have been able to reproduce quite a few issues detected by ASAN
with valgrind which does similar checks (albeit implemented in a different
way).

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: https://www.freexian.com/services/debian-lts.html
Learn to master Debian: https://debian-handbook.info/get/

Reply to:

Follow-Ups:
- Re: August Report
  - From: Roberto C. Sánchez <roberto@debian.org>

References:
- August Report
  - From: Hugo Lefeuvre <hle@debian.org>

Prev by Date: About the security issues affecting libzip in Wheezy
Next by Date: Re: August Report
Previous by thread: August Report
Next by thread: Re: August Report
Index(es):
- Date
- Thread