Re: CVE-2015-9383 - freetype

[Ineiev]

Hello,

On Thu, Dec 12, 2019 at 09:08:22PM +0100, Werner LEMBERG wrote:
> 
> > I'm working on the analysis for the vulnerability described at
> > CVE-2015-9383.  I know it has been a long time but I'm tried to have
> > access to its reproducer at:
> > 
> >   https://savannah.nongnu.org/bugs/?46346
> > 
> > so you still have access to it and could share with me?
> 
> Interesting.  I wasn't aware that attached files can disappear from
> bug reports.

Generally, they don't disappear unless users remove them.

> Savannah hackers, do you know what's going on?  What has happened to
> the three files attached to the above bug report?

All attachments moved to a different directory on the server
in the process of upgrading its operating system, I'm not aware
of full details.

Meanwhile, I attach the three files from that bug report.

asan_heap-oob_7434f1_2939_442b3e9b8c0c16e8f3c99aca244a0810
Description: Binary data

asan_heap-oob_743f8b_7843_529d1198f50ff27e12a0c9c63e173677
Description: Binary data

asan_heap-oob_744000_6447_e4eaf01c70d8bf4a961784932087c043
Description: Binary data

signature.asc
Description: PGP signature