[Bug 3452] Potential Software vulnerabilities detected using ESBMC-WR tool
    bugzilla-daemon at mindrot.org 
    bugzilla-daemon at mindrot.org
       
    Mon Jun 27 09:31:51 AEST 2022
    
    
  
https://bugzilla.mindrot.org/show_bug.cgi?id=3452
Damien Miller <djm at mindrot.org> changed:
           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |INVALID
                 CC|                            |djm at mindrot.org
--- Comment #1 from Damien Miller <djm at mindrot.org> ---
Most of these are completely obvious false positives. E.g.
> State 6 file sshkey.c line 1081 function fingerprint_bubblebabble thread 0
> ----------------------------------------------------
> Violated property:
> file sshkey.c line 1081 function fingerprint_bubblebabble
> dereference failure: array bounds violated
The array is allocated to be sufficiently sized literally in the
previous line.
Please forgive my bluntness, but low quality reports like this do
nothing but waste our time - there is no discernable signal among the
noise. 
Please do not submit more unless they have been assessed by a human.
-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
    
    
More information about the openssh-bugs
mailing list