bugmake - Bugs: bug #63609, Fix a buffer overrun in...

 
 

bug #63609: Fix a buffer overrun in warn_undefined.

Submitter:  Dmitry Goncharov <dgoncharov>
Submitted:  Tue 03 Jan 2023 05:21:28 AM UTC
   
 
Severity:  3 - Normal Item Group:  Bug
Status:  Fixed Privacy:  Public
Assigned to:  psmith Open/Closed:  Closed
Component Version:  4.4.1 Operating System:  Any
Fixed Release:  4.4.1 Triage Status:  Small Effort
* Mandatory Fields

Add a New Comment Rich Markup
   

Tue 03 Jan 2023 07:26:05 AM UTC, comment #2: 

Thanks for catching that error Dmitry!  I used a different fix and pushed it.

 Paul D. Smith <psmith>
Group administrator
Tue 03 Jan 2023 05:23:01 AM UTC, comment #1: 

The following code in warn_undefined causes a buffer overrun


if (memcmp (*cp, name, len) == 0 && (*cp)[len] == '\0')


when len exceeds strlen (*cp). This happens when make needs to expand a variable whos name is longer than *cp,

 Dmitry Goncharov <dgoncharov>
Tue 03 Jan 2023 05:21:28 AM UTC, original submission:  

.

Dmitry Goncharov <dgoncharov>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #54175:  sv63609_fix.diff added by dgoncharov (860B - text/x-patch)
file #54176:  sv63609_test.diff added by dgoncharov (1020B - text/x-patch)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by psmith (Posted a comment)
  • -email is unavailable- added by dgoncharov (Submitted the item)

    •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 7 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2023-01-03 psmith StatusNone Fixed
        Assigned toNone psmith
        Open/ClosedOpen Closed
        Fixed ReleaseNone 4.4.1
        Triage StatusNone Small Effort
    2023-01-03 dgoncharov Attached File- Added sv63609_fix.diff, #54175
        Attached File- Added sv63609_test.diff, #54176

    Back to the top

    Copyright © 2024 Free Software Foundation, Inc.
    Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved.
    The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team.
    Page source code

    Powered by Savane 3.13-02a9.
    Corresponding source code