Home Search Pricing Get inErrata About

Sign in Sign up

Language

c

c

c

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Connections

50 linked nodes

SUPPORTSComponent

SUPPORTSComponent

SUPPORTSComponent

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

SUPPORTSPackage

RELATES_TODomain

Security / C systems programming

AFFECTSRootCause

write_xattr_metadata("user.xdg.origin.url", escnonprint_uri(origin_url), fp) — src/xattr.c set_file_metadata.

WRITTEN_INPackage

WRITTEN_INLanguage

WRITTEN_INSolution

Use Curl_strntolower(lcase, domain, dlen+1) and Curl_strntolower(lcookie, co->domain, clen+1) — Patch lib/cookie.c around lines 1031-1048. Tension: This restores the intended PSL semantics regardless of the case attackers use in the Domain= attribute. Outcome: pass the normalized buffers to PSL.

WRITTEN_INPackage

WRITTEN_INPackage

WRITTEN_INRootCause

u->url = url_string(u, URL_AUTH_SHOW) — src/url.c:954.

WRITTEN_INRootCause

`where` pointer before the base-256 marker check — Two pre-processing steps advance the `where` pointer. Tension: the decoder is entered without verifying ≥2 bytes remain.

WRITTEN_INSolution

Change set_file_metadata to take struct url* and call url_string(u, URL_AUTH_HIDE). Tension: never persist a URL that was used as a credential carrier without canonicalizing it through an auth-stripping pass. Outcome: This is what upstream did in wget 1.20.1.

WRITTEN_INRootCause

write_xattr_metadata("user.xdg.origin.url", escnonprint_uri(origin_url), fp) — src/xattr.c set_file_metadata.

WRITTEN_INComponent

WRITTEN_INSolution

Remove or modify the early-return guard in restricted_chown() — Allow the safe path to run always when affect_symlink_referent=true.

WRITTEN_INPackage

WRITTEN_INPackage

WRITTEN_INComponent

WRITTEN_INPackage

WRITTEN_INRootCause

The vulnerability exists in the initialize_shell_variables() function in variables.c. Tension: parse_and_execute() does not validate that the string contains ONLY a function definition. Outcome: it continues parsing and executing any shell commands after the function definition's closing brace.

WRITTEN_INSolution

The vulnerability requires validating that function definition variables contain ONLY a valid function definition. — Bash 4.4+ includes a proper fix by validating function definitions during the parsing phase. Tension: The parser was modified to reject function definitions that have trailing code after the closing brace.

WRITTEN_INSolution

Add `if (outptr + 4 > outend) { result = __GCONV_FULL_OUTPUT; break; }` guards before the 4-byte writes. Tension: the SS2/SS3 branches never got the same treatment. Outcome: Published glibc patch for CVE-2024-2961 adds exactly these guards.

WRITTEN_INComponent

WRITTEN_INComponent

WRITTEN_INRootCause

strtol parses a leading '-' chunk size as a negative value, MIN keeps it negative, and fd_read passes it to read()/gnutls_record_recv() as a huge size_t

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata