Commit [f56e61]  Maximize  Restore  History

pan: fix potential overrun in tag_report

char *cuts_info[5];
...
while (tok_num < 5 &&
(cuts_info[++tok_num] = strtok(NULL, "\t ")) != NULL) ;

While above can run for tok_num == 4, in which case:
cuts_info[++tok_num] becomes cuts_info[5]
and that is outside of cuts_info array.

Signed-off-by: Jan Stancek <jstancek@redhat.com>
Signed-off-by: Wanlong Gao <gaowanlong@cn.fujitsu.com>

Jan Stancek Jan Stancek 2013-03-21

Wanlong Gao Wanlong Gao 2013-03-22

changed pan/tag_report.c
pan/tag_report.c Diff Switch to side-by-side view
Loading...

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:

JavaScript is required for this form.





No, thanks