8 ms·
Also, The fact that inet_ntop.c was patched following this experiment's report highlights another perspective: how a previously dismissed issue can ultimately s
by lopanapol 7mo ago
Also, The fact that inet_ntop.c was patched following this experiment's report highlights another perspective: how a previously dismissed issue can ultimately spark a fix that significantly enhances code security.
https://github.com/curl/curl/commits/1886260a95f442d947b4d1fc01be95ee55e5f5a1/lib/inet_ntop.c https://github.com/curl/curl/commits/1886260a95f442d947b4d1f...
https://github.com/curl/curl/commit/97164e99deda1b47f8f483cd05c1a312f7cc5c3a https://github.com/curl/curl/commit/97164e99deda1b47f8f483cd...
https://github.com/curl/curl/commit/784a8ec2c1a3cc4bd676077a28a0d5f6ee7786a5 https://github.com/curl/curl/commit/784a8ec2c1a3cc4bd676077a...
https://github.com/curl/curl/commit/1886260a95f442d947b4d1fc01be95ee55e5f5a1 https://github.com/curl/curl/commit/1886260a95f442d947b4d1fc...
https://nvd.nist.gov/vuln/detail/CVE-2025-0725 https://nvd.nist.gov/vuln/detail/CVE-2025-0725
This highlights that no one's time is ever wasted. An experiment that was once insulted and condemned as pointless turned out to be the small spark that triggered a series of quiet code fixes. However, I feel for the hackers in other projects who pointed out vulnerabilities only to be dismissed because the maintainers didn't want to pay up, only for them to secretly apply the fixes anyway. Fortunately, curl is not that unethical.