Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 17 Nov 2017 22:19:22 +0100
From: Jakub Wilk <jwilk@...lk.net>
To: oss-security@...ts.openwall.com
Subject: Re: phusion passenger CVE-2017-1000384

* John Lightsey <jd@...nel.net>, 2017-11-17, 14:58:
>https://github.com/phusion/passenger/commit/4043718264095cde6623c2cbe8c644541036d7bf

This adds:

   #ifdef false
   ...
   #endif

But false _is_ a defined macro in this file, so this doesn't disable the 
code inside. I guess they meant to write:

   #if false
   ...
   #endif

-- 
Jakub Wilk

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.