<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
<div class="moz-forward-container"> Hello,<br>
<br>
I think that this one isn't a bug. I'm considering closing it
as 'invalid'. May someone double-check ?<br>
<br>
Regards,<br>
Stef<br>
<br>
-------- Forwarded Message --------
<table class="moz-email-headers-table" cellpadding="0"
cellspacing="0" border="0">
<tbody>
<tr>
<th nowrap="nowrap" valign="BASELINE" align="RIGHT">Subject:
</th>
<td>[sane-Bugs][315132] fixes too small arrays in
backend/niash.c</td>
</tr>
<tr>
<th nowrap="nowrap" valign="BASELINE" align="RIGHT">Date: </th>
<td>Sun, 13 Sep 2015 20:12:01 +0000</td>
</tr>
<tr>
<th nowrap="nowrap" valign="BASELINE" align="RIGHT">From: </th>
<td><a class="moz-txt-link-abbreviated" href="mailto:sane-bugs@alioth.debian.org">sane-bugs@alioth.debian.org</a></td>
</tr>
<tr>
<th nowrap="nowrap" valign="BASELINE" align="RIGHT">Reply-To:
</th>
<td><a class="moz-txt-link-abbreviated" href="mailto:sane-bugs@alioth.debian.org">sane-bugs@alioth.debian.org</a></td>
</tr>
<tr>
<th nowrap="nowrap" valign="BASELINE" align="RIGHT">To: </th>
<td><a class="moz-txt-link-abbreviated" href="mailto:noreply@alioth.debian.org">noreply@alioth.debian.org</a></td>
</tr>
</tbody>
</table>
<br>
<br>
<pre>sane-Bugs item #315132 was changed at 13/09/2015 22:12 by Stéphane Voltz
You can respond by visiting:
<a class="moz-txt-link-freetext" href="https://alioth.debian.org/tracker/?func=detail&atid=410366&aid=315132&group_id=30186">https://alioth.debian.org/tracker/?func=detail&atid=410366&aid=315132&group_id=30186</a>
Status: Open
Priority: 3
Submitted By: Johannes Meixner (jsmeix-guest)
Assigned to: Stéphane Voltz (stefdev-guest)
Summary: fixes too small arrays in backend/niash.c
Category: backends (drivers)
Group: None
Resolution: Accepted
Initial Comment:
See
<a class="moz-txt-link-freetext" href="https://bugzilla.opensuse.org/show_bug.cgi?id=246654">https://bugzilla.opensuse.org/show_bug.cgi?id=246654</a>
----------------------------------------------------------------------
>Comment By: Stéphane Voltz (stefdev-guest)
Date: 13/09/2015 22:12
Message:
temporarily disabled options since 2004 :-)
However, where is the buffer overflow ? There more options than the array, but only [0..optLast[ one are copied, so size is OK.
----------------------------------------------------------------------
You can respond by visiting:
<a class="moz-txt-link-freetext" href="https://alioth.debian.org/tracker/?func=detail&atid=410366&aid=315132&group_id=30186">https://alioth.debian.org/tracker/?func=detail&atid=410366&aid=315132&group_id=30186</a>
</pre>
<br>
</div>
<br>
</body>
</html>