Re: grep vs. CVE-2012-5667 (integer type too small)

[Ignatios Souvatzis <is%netbsd.org@localhost>]

Hi,

On Fri, Dec 28, 2012 at 11:29:01AM +0100, Ignatios Souvatzis wrote:

> a) 
> <http://git.savannah.gnu.org/cgit/grep.git/commit/?id=cbbc1a45b9f843c811905c97c90a5d31f8e6c189>
> 
> and two others that also relate to integer overflow fixes from 2.11:
> 
> b) 
> <http://git.savannah.gnu.org/cgit/grep.git/commit/?id=4572ea4649d025e51463d48c2d06a1c66134cdb8>
>  
> (don't call pcre_exec with lines of > 2^31 bytes)
> 
> and 
> 
> c) 
> <http://git.savannah.gnu.org/cgit/grep.git/commit/?id=8fcf61523644df42e1905c81bed26838e0b04f91>

Be aware that those patches are derived from GPLv3 code... not all changes
are a simple integer type change.

        -is