oss-sec mailing list archives

gcj jar manifest parsing segfault with classpath references

From: Kurt Seifried <kseifried () redhat com>
Date: Sat, 07 Feb 2015 10:20:36 -0700

https://bugzilla.redhat.com/show_bug.cgi?id=524177

not sure if this really counts since an attacker that controls the
manifest can include arbitrary stuff.


-- 
Kurt Seifried -- Red Hat -- Product Security -- Cloud
PGP A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993

Attachment: signature.asc
Description: OpenPGP digital signature

Current thread:

gcj jar manifest parsing segfault with classpath references Kurt Seifried (Feb 07)