Bug 605638

Summary:	sys-apps/ed: CVE-2017-5357: invalid free
Product:	Gentoo Security	Reporter:	Ian Zimmerman <nobrowser>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED OBSOLETE
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
See Also:	https://bugs.gentoo.org/show_bug.cgi?id=605552
Whiteboard:
Package list:		Runtime testing required:	---

Description Ian Zimmerman 2017-01-14 06:42:33 UTC

According to the posting on oss-security:

ed 1.14.1 fixes an invalid free, reported here:
https://lists.gnu.org/archive/html/bug-ed/2017-01/msg00000.html

Reproducer:
echo -e "H\n?\{" | ed

Found with afl.


Reproducible: Always