Menu

#1 Potential buffer overflow for queries

open
5
2007-10-25
2007-10-25
Toby Hawker
No

The switch to fgets() from the GNU-libc dependent getline() means that a fixed-size buffer is currently being used to read query lines from the query file, which will overflow if the input line is longer than this.

This should not happen for well-formed data, but still needs rectification.

Discussion


Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.