Control: tag -1 patch On Thu, Dec 21, 2017 at 04:55:00PM +0100, Matthias Brinke wrote: > I have simplified my fix for CVE-2017-8054 (stack overflow > by infinite recursion from loop in pages tree) and tested > it again in an unstable chroot (entered by sbuild from > jessie-backports), which was clean, up-to-date and maybe > also minimal (why does it contain GNU autotools?). It is, > of course, attached here. The source for a generator just > using PoDoFo outputting the simple/mostly-minimal PoC I > tested with is also attached. Please accept it for your > next upload (could you please do it before upstream puts > out its next release or rc tarball?)
I could, but could you please send it upstream? The only way to interact with upstream is the podofo-users ML https://sourceforge.net/p/podofo/mailman/podofo-users/ -- regards, Mattia Rizzolo GPG Key: 66AE 2B4A FCCF 3F52 DA18 4D18 4B04 3FCD B944 4540 .''`. more about me: https://mapreri.org : :' : Launchpad user: https://launchpad.net/~mapreri `. `'` Debian QA page: https://qa.debian.org/developer.php?login=mattia `-
signature.asc
Description: PGP signature
