bugDotGNU Portable.NET - Bugs: bug #7373, Buffer Overflow in StringBuilder

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #7373: Buffer Overflow in StringBuilder

Submitter:  Richard Baumann <Rich333>
Submitted:  Thu 22 Jan 2004 12:24:55 AM UTC
   
 
Category:  None Severity:  4 - Important
Item Group:  None Status:  Fixed
Privacy:  Public Assigned to:  None
Open/Closed:  Closed

Thu 22 Jan 2004 01:13:43 AM UTC, comment #1: 

Fix committed to CVS (pnetlib) - 22 Jan 2004

Rhys Weatherley <rweather>
Group administrator
Thu 22 Jan 2004 12:24:55 AM UTC, original submission:  

The attached test case outputs just the first character of the string which is appended to the StringBuilder, however in other code (some of my new xml text reader code) it segfaults. The call to memcpy in the internal call behind Append() is writing past the end of the buffer.

Richard Baumann <Rich333>
Group Member

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attached Files
file #1001:  sb.cs added by Rich333 (230B - application/octet-stream)

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

 

Follow 3 latest changes.

Date Changed by Updated Field Previous Value => Replaced by
2004-01-22 rweather StatusNone Fixed
    Open/ClosedOpen Closed
2004-01-22 Rich333 Attached File- Added sb.cs, #981

Back to the top

Powered by Savane 3.12