Skip to content
Commit b9293373 authored by Filipe Brandenburger's avatar Filipe Brandenburger Committed by Zbigniew Jędrzejewski-Szmek
Browse files

journal: fix out-of-bounds read CVE-2018-16866

The original code didn't account for the fact that strchr() would match on the
'\0' character, making it read past the end of the buffer if no non-whitespace
character was present.

This bug was introduced in commit ec5ff444 which was first released in
systemd v221 and later fixed in commit 8595102d which was released in
v240, so versions in the range [v221, v240) are affected.
parent 743b771c
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment