Name
indent
Version
2.2.12
Type
library
Description
A GNU program for formatting C code
Licenses
GPL-3.0-only
PURL
-
CPE
cpe:2.3:*:*:indent:2.2.12:*:*:*:*:*:*:*
Other Versions#
Patches#
#
Title
Author
Resolve
1
Fix a heap buffer underread in set_buf_break()
=?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= <ppisar@redhat.com>
CVE-2024-0911
2
Fix builds with recent gettext
Alexander Kanavin <alex.kanavin@gmail.com>
3
Fix an out-of-buffer read in search_brace()/lexi() on an
Petr Písař <ppisar@redhat.com>
CVE-2023-40305
4
src/indent.c: correct the check for locale.h
Mingli Yu <mingli.yu@windriver.com>
5
Fix a heap buffer overwrite in search_brace()
Petr Písař <ppisar@redhat.com>
CVE-2023-40305
6
Makefile.am: remove regression dir
Mingli Yu <mingli.yu@windriver.com>
7
Remove dead paren_level code
Khem Raj <raj.khem@gmail.com>
Vulnerabilities#
Name
Analysis
Description
Patched
A flaw was found in indent, a program for formatting C code. This issue may allow an attacker to trick a user into processing a specially crafted file to trigger a heap-based buffer overflow, causing the application to crash.
Patched
GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.