Hello Mathieu, On Mon, Oct 16, 2017 at 06:12:30PM +0200, Mathieu Malaterre wrote: > Control: severity -1 important > > While I understand the this generic heap based buffer overflow ought > to be fixed in Debian stable, I fail to see why it is marked as > affecting stretch. [...]
In my initial report I wrote: "The issue is covered by [3], so trying to reproduce the issue leads to an assertion failure up to the version in sid instead." My point was, yes if you try to reproduce with current version you will reach the assertion, because it's yet covered by the missing commit 4241ae6fbbf1de9658764a80944dc8108f2b4154. Applying that as well shows the underlying issue. Hope this helps! Regards, Salvatore
