Bug#948463: libai-fann-perl: Integer overflow leading to heap buffer overflow

[gregor herrmann]

On Wed, 08 Jan 2020 15:19:47 -0700, Jayakrishna Vadayath wrote:

> As a part of an academic project, we have discovered an integer overflow
> which can lead to a heap buffer overflow in the libai-fann-package.

Thanks for your bug report and your work.

As this is not a bug in the packaging, I've forwarded your bug report
to the upstream issue tracker:

https://rt.cpan.org/Ticket/Display.html?id=131404

For the future: If you find more of those cases, please try to submit
them directly to the upstream authors of the CPAN distributions.


Cheers,
gregor
 
-- 
 .''`.  https://info.comodo.priv.at -- Debian Developer https://www.debian.org
 : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D  85FA BB3A 6801 8649 AA06
 `. `'  Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
   `-   NP: A Glezele Wayn
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: Digital Signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20200109/43ef935e/attachment.sig>