Re: two vulns in uClibc-0.9.33.2

["fefe" <qbenjin () qq com>]

> > I found two vulns in  uClibc-0.9.33.2 (https://uclibc.org/)

> uClibc is dead. Active development happens on uClibc-ng. Is uClibc-ng
also affected by these issues?


uclibc_ng is also affected.
> > one is about line 2682 of get_subexp.c :

> I take it you are referring to libc/misc/regex/regexec.c?


yes. i am sorry??