3 ms·

I opened one at random and it's an uint overflow lol. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10879 https://cve.mitre.org/cgi-bin/cvename.cgi?n

• ridiculous_fish 5y ago
  The patch is completely bogus: https://github.com/teeworlds/teeworlds/commit/4d529dcd2d01022e979ebfa0b91167dee37cdb8e https://github.com/teeworlds/teeworlds/commit/4d529dcd2d0102... Here it tries to avoid overflow by assigning the result of 32 bit arithmetic to a 64 bit type. That's a common mistake.