diff options
| author | cinap_lenrek <cinap_lenrek@felloff.net> | 2016-11-27 21:20:27 +0100 |
|---|---|---|
| committer | cinap_lenrek <cinap_lenrek@felloff.net> | 2016-11-27 21:20:27 +0100 |
| commit | 6d424674113a6a6dd2566d82ba15f20d2d3090e7 (patch) | |
| tree | acf91e8ff2f356e587261333122aa12ce22c6b84 /lib | |
| parent | 0edcb33ca1f01f8e3c18f5ad99442da8aad2091f (diff) | |
| download | plan9front-6d424674113a6a6dd2566d82ba15f20d2d3090e7.tar.xz | |
stdio: fix sclose() buffer overrun when terminating string, realloc() error handling (thanks porlock)
theres a bug is in sclose() where it doesnt check if wp is beyond
the buffer. also wp was not updated after realloc().
bug was reported by porlock on 9fans:
Plan 9's implementation of the standard C functions snprintf and
vsnprintf have a buffer overrun bug.
If the buffer length equals the output length (without the terminating
null), then one too many characters is written to the buffer.
For example,
snprintf(buf, 4, "ABCD");
will write 5 characters to buf.
Diffstat (limited to 'lib')
0 files changed, 0 insertions, 0 deletions
