Re: sharutils: Directory traversal (security issue) in uudecode

[Paul Eggert]

While briefly looking into that bug report I noticed some undefined 
behavior in uudecode.c. It uses sscanf to scan from and to the same 
string, which is undefined behavior since sscanf's first argument has 
the 'restrict' keyword.

Proposed patch attached. I haven't compiled or tested this since 
sharutils doesn't bootstrap these days (I'll follow up with a separate 
email about that).

0001-Avoid-undefined-sscanf-behavor.patch
Description: Text Data