Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 9 May 2013 15:03:38 +0200
From: Peter Bex <>
To: Open Source Security <>
Subject: Re: CVE request: CHICKEN Scheme incomplete fix for CVE-2012-6122 (select() fs_set buffer overrun)

On Wed, May 08, 2013 at 11:07:02PM +0200, Peter Bex wrote:
> There are two commits which together fix the bug:

Correction, this introduced a bug on systems where connect() can return
EINPROGRESS, resulting in an exception being raised when connecting to a
socket and immediately writing to it.  A third patch is required to fix
this bug:;a=commitdiff;h=766056cd5f26b1d529405705449cb534609c113f


Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.