Security Bug in aircrack-ng (was: Re: Quake3 security issue and non-responsive maintainer: Xavier) Lamien

[Till Maas]

On Tue, May 11, 2010 at 11:10:39AM -0800, Jeff Spaleta wrote:
> On Tue, May 11, 2010 at 10:57 AM, Jon Ciesla <limb at jcomserv.net> wrote:
> > Well, no, not if there's an easy way to find the existing stuff.  Is
> > there a way to extract this info from Bugzilla?  I'd stick that query in
> > my bookmarks and peek at it every couple days.
> 
> Indeed. I'd like to use my proven powers for good for a change. But I
> need to be informed so I can prioritize my time accordingly.  If you
> did up a query that makes sense as a list for review please share.

If someone with good C skills is interested in properly fixing a bug in
Fedora, here is one in aircrack-ng:
https://bugzilla.redhat.com/show_bug.cgi?id=577654

The problem is, that the affected code parses WIFI packages, using a lot
of copy&paste redudancy and upstream seems not to properly address this
and my C-skills are lot less advanced. But maybe someone coding
regularly in C can help here.

Regards
Till
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/devel/attachments/20100512/0fbf4f07/attachment.bin