Hi I forgot to mention: There is a icaltestparser.c in the sources under which can be used to run the verifier.
On Mon, Apr 17, 2017 at 08:31:19AM +0200, Salvatore Bonaccorso wrote: > This one was initially reported at [1], then to [2] and got assigned > the CVE in [3]. There is some unclearness unfortunately around the > libical CVEs due to reports. To verify this one in the [2] report > there is a reproducer which can be use to test/verify a potential fix. Rereading this sentence was slighty confusing I think. What I mean is that there were several reporter reporting issues in libical at that time, the respective CVE assignments arise though from https://marc.info/?l=oss-security&m=146685931517961&w=2 Regards, Salvatore