Menu

#1 buffer overflows are rampant

open
nobody
None
9
2004-12-03
2004-12-03
w0nderd0g
No

There are tons and tons of buffer overflows in this code.
Author used static C arrays, and wrote his own strcpy
code that also removes spaces & converts to lower.
Unfortunately it does not check for fixed buffer length.

Code should be rewritten... temporary [HACK] fix would
be to use strncpy or add length checks.

Discussion


Log in to post a comment.

MongoDB Logo MongoDB