oss-sec mailing list archives

Re: phusion passenger CVE-2017-1000384


From: Jakub Wilk <jwilk () jwilk net>
Date: Fri, 17 Nov 2017 22:19:22 +0100

* John Lightsey <jd () cpanel net>, 2017-11-17, 14:58:
https://github.com/phusion/passenger/commit/4043718264095cde6623c2cbe8c644541036d7bf

This adds:

  #ifdef false
  ...
  #endif

But false _is_ a defined macro in this file, so this doesn't disable the code inside. I guess they meant to write:

  #if false
  ...
  #endif

--
Jakub Wilk


Current thread: