Menu

#4 Macro plugin contains buffer overflow

open
nobody
G19D (4)
5
2010-07-20
2010-07-20
Anonymous
No

The sprintf on line 277 prints a string of 13 (if %i is 1 character) visible characters (and presumably also a null terminator but I don't know C well enough to say for sure). It writes those into a 12 byte array which lead the gcc 4.5 fortify overflow protection to abort the program.

When I changed the size of elements to 14 it worked.

Discussion


Log in to post a comment.