Skip site navigation (1)Skip section navigation (2) 
Date:      Sun, 12 Jun 2022 15:33:39 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 264636] staging: vc04_services: Use scnprintf() for avoiding potential buffer overflow
Message-ID:  <bug-264636-227@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help 
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D264636

            Bug ID: 264636
           Summary: staging: vc04_services: Use scnprintf() for avoiding
                    potential buffer overflow
           Product: Base System
           Version: Unspecified
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: xiaohuizhang@ruc.edu.cn

Created attachment 234643
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D234643&action=
=3Dedit
a possible patch

Since snprintf() returns the would-be-output size instead of the=20
actual output size, the succeeding calls may go beyond the given
buffer limit.  Fix it by replacing with scnprintf().

--=20
You are receiving this mail because:
You are the assignee for the bug.=

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-264636-227>