Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 25 Nov 2018 13:09:12 +0100
From: Agostino Sarubbo <>
Subject: Re: catdoc: out of bounds heap read and nullpointer / segfault

On domenica 25 novembre 2018 09:57:37 CET Hanno Böck wrote:
> I reported two memory safety bugs in the command line tool catdoc.
> However the mails to the developer bounced.
> The first is an out of bounds heap read, to detect it catdoc needs to
> be compiled with address sanitizer (test it with -fsanitize=address in
> The second is a null pointer and will just crash catdoc.

Hi Hanno,

something about catdoc was already reported time ago:

I don't know atm if your findings are duplicate or not.

Agostino Sarubbo
Gentoo Linux Developer

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.