buffer overflow in exp_log.c

Brought to you by: andreas_kupries, hobbs, libes, pyssling

#95 buffer overflow in exp_log.c

Status: open

Owner: nobody

Labels: None

Priority: 5

Updated: 2013-12-18

Created: 2013-12-18

Private: No

There's "static char bigbuf[2000]" defined in exp_log.c, which is then used to write in with vsprintf in various logging functions.

The buffer could overflow (actually it does - e.g. when running systemtap testsuite).

Attached patch replaces vsprintf with vsnprintf function, which checks the length of destination buffer.

1 Attachments

log-buf-overflow.patch