bugmake - Bugs: bug #36641, Crash when using ridiculously...

 
 

bug #36641: Crash when using ridiculously large target names

Submitter:  None
Submitted:  Tue 12 Jun 2012 05:16:49 PM UTC
   
 
Severity:  3 - Normal Item Group:  Bug
Status:  Duplicate Privacy:  Public
Assigned to:  None Open/Closed:  Closed
Component Version:  3.82 Operating System:  Any
Fixed Release:  None Triage Status:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Sun 09 Sep 2012 10:03:54 PM UTC, comment #1: 

This is a duplicate of Savannah bug #35525.

Paul D. Smith <psmith>
Group administrator
Tue 12 Jun 2012 05:16:49 PM UTC, original submission:  

If the stem len is bigger than PATH_MAX, it results in a buffer over run:

455a456

>         unsigned int stemlen_copy;

494,495c495,497
<           strncpy (stem_str, stem, stemlen);
<           stem_str[stemlen] = '\0';
---

>           stemlen_copy = stemlen > sizeof(stem_str) ? sizeof(stem_str) : stemlen;
>           strncpy (stem_str, stem, stemlen_copy);
>           stem_str[stemlen_copy] = '\0';


Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by psmith (Posted a comment)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2012-09-09 psmith StatusNone Duplicate
        Open/ClosedOpen Closed

    Back to the top

    Powered by Savane 3.13-caa5.
    Corresponding source code