Menu

#2486 xmlUnescape may access memory beyond its buffer

Stability
pending-fixed
sfcb (1090)
5
2012-06-15
2012-06-14
No

"cimXmlParserProcessed.c", line 413: accessing beyond allocated memory
ONE POSSIBLE PATH LEADING TO THE ERROR:
"cimXmlParserProcessed.c", line 347: the if-condition is false
"cimXmlParserProcessed.c", line 356: the if-condition is false
"cimXmlParserProcessed.c", line 362: assuming `semiloc-buf == MAX_UNESC_CHAR_LEN'
"cimXmlParserProcessed.c", line 362: the if-condition is false (used as evidence that error is possible)
"cimXmlParserProcessed.c", line 369: the if-condition is false
"cimXmlParserProcessed.c", line 413: `strncpy' could write into the buffer `escchar'
which is 10 bytes long

Discussion

  • Chris Buccella

    Chris Buccella - 2012-06-14

    committed patch (1.3 branch)

     
  • Chris Buccella

    Chris Buccella - 2012-06-15

    committed to CVS HEAD and git master

     
  • Chris Buccella

    Chris Buccella - 2012-06-15
    • status: open --> pending-fixed
     

Log in to post a comment.