Re: [Chicken-hackers] [PATCH] [SECURITY] Fix segfault in C_i_length() on improper lists

2017-05-31 Thread Peter Bex
On Wed, May 31, 2017 at 04:52:33PM +1200, Evan Hanson wrote: > Applied. > > Bit surprised at this one. How on earth did it hang around for so long? Exactly my thoughts. This really makes no sense! Cheers, Peter signature.asc Description: Digital signature

Re: [Chicken-hackers] [PATCH] [SECURITY] Fix segfault in C_i_length() on improper lists

2017-05-30 Thread Evan Hanson
Applied. Bit surprised at this one. How on earth did it hang around for so long? Thanks for the fix, Peter. Evan signature.asc Description: PGP signature ___ Chicken-hackers mailing list Chicken-hackers@nongnu.org

[Chicken-hackers] [PATCH] [SECURITY] Fix segfault in C_i_length() on improper lists

2017-05-28 Thread Peter Bex
Hi all, I just noticed ticket #1375 is caused by an incorrect check in C_i_length which causes a segfault when passed an improper list. That means this could be a denial of service if (length) is used on user input. The attached patch applies both to master and chicken-5. Cheers, Peter From