kc3-lang/libbsd

• Show log

  Commit

• Hash : c8f0723d
  Author :
  Date : 2016-01-27T15:10:11
  

  Fix heap buffer overflow in fgetwln() In the function fgetwln() there's a 4 byte heap overflow. There is a while loop that has this check to see whether there's still enough space in the buffer: if (!fb->len || wused > fb->len) { If this is true more memory gets allocated. However this test won't be true if wused == fb->len, but at that point wused already points out of the buffer. Some lines later there's a write to the buffer: fb->wbuf[wused++] = wc; This bug was found with the help of address sanitizer. Warned-by: ASAN Fixes: https://bugs.freedesktop.org/show_bug.cgi?id=93881 Signed-off-by: Guillem Jover <guillem@hadrons.org>

• Files

• .gitignore
• COPYING
• Makefile.am
• README
• TODO
• autogen
• configure.ac
• get-version
• include/
• man/
• src/
• test/

• Properties

• Git HTTP	https://git.kmx.io/kc3-lang/libbsd.git
  Git SSH	git@git.kmx.io:kc3-lang/libbsd.git
  Public access ?	public
  Description	https://libbsd.freedesktop.org/
  Users
  Tags	0.9.1 0.9.0 0.8.7 0.8.6 0.8.5 0.8.4 0.8.3 0.8.2 0.8.1 0.8.0 0.7.0 0.6.0 0.5.2 0.5.1 0.5.0 0.4.2 0.4.1 0.4.0 0.3.0 0.2.0 0.11.7 0.11.6 0.11.5 0.11.4 0.11.3 0.11.2 0.11.1 0.11.0 0.10.0 0.1.6 0.1.5 0.1.4 0.1.3 0.1.2 0.1.1 0.1.0 0.0.1 0.0