Bug#987959: pev: peres affected by off-by-one error in libpe

To: Petter Reinholdtsen <pere@hungry.com>
Cc: 987959@bugs.debian.org
Subject: Bug#987959: pev: peres affected by off-by-one error in libpe
From: Benoît Sevens <benoit.sevens@gmail.com>
Date: Thu, 6 May 2021 21:20:45 +0200
Message-id: <[🔎] CAGOw7zjJV09TYXBrzYmLkvKXwgD3Fo0BFjvkdh8rRtd5zNGHdQ@mail.gmail.com>
Reply-to: Benoît Sevens <benoit.sevens@gmail.com>, 987959@bugs.debian.org
In-reply-to: <[🔎] sa6y2csgw1z.fsf@hjemme.reinholdtsen.name>
References: <161998004814.143827.13124465023429559397.reportbug@bsevens.zrh.corp.google.com> <[🔎] 20210505124020.GA2243@hjemme.reinholdtsen.name> <[🔎] sa6y2csgw1z.fsf@hjemme.reinholdtsen.name> <161998004814.143827.13124465023429559397.reportbug@bsevens.zrh.corp.google.com>

Since it can corrupt adjacent heap chunk metadata, this definitely looks like a security issue to me.

On Thu, May 6, 2021 at 9:29 AM Petter Reinholdtsen <pere@hungry.com> wrote:

I asked for an unblock from the release team in
<URL: https://bugs.debian.org/988095 >.

--
Happy hacking
Petter Reinholdtsen

Reply to:

References:
- Bug#987959: pev: peres affected by off-by-one error in libpe
  - From: Petter Reinholdtsen <pere@hungry.com>
- Bug#987959: pev: peres affected by off-by-one error in libpe
  - From: Petter Reinholdtsen <pere@hungry.com>