On Sun, 03 Sep 2017, Hugo Lefeuvre wrote: > These CVEs are especially difficult to reproduce because wheezy's gcc > doesn't have asan and reproduction conditions might require a specific > setup.
FWIW, I have been able to reproduce quite a few issues detected by ASAN with valgrind which does similar checks (albeit implemented in a different way). Cheers, -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: https://www.freexian.com/services/debian-lts.html Learn to master Debian: https://debian-handbook.info/get/
