Menu

#90 potential buffer overflow in setup.c

Trunk
open
nobody
None
5
2021-08-18
2021-08-18
No

In src/setup.c:94, there is potential buffer overflow vulnerability.
The program reads value from an environment variable and puts it to sprintf with no length check.
Since DataDirectory has fixed size, it can cause buffer overflow which leads to buggy behavior.

sprintf(DataDirectory, "%s/.dvbstreamer", getenv("HOME"));

Discussion


Log in to post a comment.

Monday.com Logo