Re: Report bugs that will crash tic in ncurses 6.1

[Li,Peng(R&D Center, USA)]

Hi Thomas

Thank you for your timely reply, can you please guide us how to find the latest 
code incorporating all changes?

Thanks
Peng

On 9/14/18, 12:09 PM, "Thomas Dickey" <address@hidden> wrote:

    On Fri, Sep 14, 2018 at 06:12:01PM +0000, Li,Peng(R&D Center, USA) wrote:
    > Hi There
    > 
    > Peng Li and Rundong Zhou at Baidu X-Lab found a few test cases which are 
able
    > to crash tic in ncurses 6.1, can you please verify them?  If you confirm 
they
    > are true positives, can you also guide how to apply CVEs?  In addition, we
    > have several more cases which are able to crash tic and dump different
    > outputs, but we are not sure if they are caused by same errors.  If you 
are
    > interested in, we will send them to you together.
    
    There were some reports a year ago, which were addressed at that time.
    
    Various packagers incorporated the changes.  If you want to report a
    CVE, that has to be against one of the packages, and should be addressed
    in their respective bug-tracking systems.
     
    > Please view the test case tarball in the attachment.
    
    I did, found no issues with the current code (using valgrind).
    
    -- 
    Thomas E. Dickey <address@hidden>
    https://invisible-island.net
    ftp://ftp.invisible-island.net