Internet Bug Bounty: Several protocol parsers in before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal()

Length of a local buffer used to parse network packets was not validated against actual payload size leading to a classic buffer overflow. P.S. I was not aware of this bounty program at the time of reporting. Is this report in scope? I have a few more reports that were originally sent to the...