Joerg Jung wrote:
> Here comes another one...
> 
> As mentioned in this thread:
> http://marc.info/?t=144772469400002&r=1&w=2 in this mail:
> http://marc.info/?l=oss-security&m=144774881126397&w=2
> 
> 'sent empty' with empty being a 0-length file will produce a memory
> access error.  On OpenBSD with malloc.conf -> J it happily dereferences a
> 0xd0d0d0d0d0d0d0 pointer since there is not such input as line[0] if the
> file is empty.
> 
> Same for a file with blank lines.

Heyho Joerg,

I cannot reproduce both of these bugs with current HEAD. I get the usage message
as it is expected due to the following two lines in main():

    if (!slides || !slides[0].lines)
        usage();

Maybe you or they are running an old version? Please try the latest one.

--Markus

Reply via email to