Mastodawn

daniel:// stenberg://Dec 13, 2024

"let me use an AI and file another bug against #curl

https://github.com/curl/curl/issues/15736

Severe Remote Code Execution Vulnerability in `varexpand` Function Due to Insecure Input Handling and Memory Operations · Issue #15736 · curl/curl

I did this A critical remote code execution vulnerability exists in the varexpand function due to a combination of insecure input handling, unsafe memory operations, and improper execution of user-...

GitHub

Show thread

Sunny Dec 13, 2024

@bagder They accidentally pasted their conversation history with ChatGPT into another issue as well...

You said:
What is the major bug in this code
[...]

ChatGPT said:
The code contains a critical logical bug that violates an assertion in the function tiling_resize_for_border:
[...]

You said:
Write a github bug report for that issue, make it sound extremely major

Why.

Bug Report: Critical Issue with Resizing Logic in Tiling Mode · Issue #6333 · i3/i3

Welcome Yes, I'm using the latest major release or the current development version. These are the only supported versions. Yes, I've searched similar issues and discussions on GitHub and didn't fin...

GitHub

Show thread

Cassandrich Dec 13, 2024

@sunny @bagder Github needs to use server logs to identify their real account and suspend that. These asshats won't stop til the Find Out phase.

Show thread

Lars Marowsky-Brée 😷

@dalias @sunny @bagder Yes, but public services like OpenAI need to refuse such queries too.