CVE-2009-0537

CVE-2009-0537 involves an integer overflow in libc’s fts_build() within the fts.c implementation. The root cause is a signed short (fts_level) overflow when traversing very deep directory trees, which can crash an affected program (e.g., du, rm, chmod, chgrp on OpenBSD; SearchIndexer.exe on Windo...