On Tue, Jun 23, 2026 at 02:27:37AM -0600, Renaud Allard wrote:
> CVSROOT:      /cvs
> Module name:  src
> Changes by:   [email protected]  2026/06/23 02:27:37
> 
> Modified files:
>       usr.bin/tsort  : tsort.c 
> 
> Log message:
> Fix heap buffer overread with embedded null bytes in input

I don't think having embedded NULs in the input makes any sense.

If we want to protect against that, I would errx outright because
of incorrect input.

Reply via email to