OpenSAF / Tickets / #1286 LOG: String copy without length check or check if string

LOG: String copy without length check or check if string

#1286 LOG: String copy without length check or check if string

Milestone: 5.1.FC

Status: fixed

Owner: nobody

Labels: None

Type: defect

Component: log

Part: -

Version: 4.4

Priority: major

Blocker: False

Updated: 2017-05-22

Created: 2015-03-26

Creator: elunlen

Private: No

When standby receives checkpointing for a log record write the received name of logFileCurrent is copied to the stream info This is done using strcpy. At least length check must be done in case the in data is garbage. May cause segv
See function ckpt_proc_log_write() in lgs_mbcsv.c

Discussion

Mathi Naickan - 2015-03-31

Milestone: 4.4.2 --> 4.5.2
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Mathi Naickan - 2015-03-31

Milestone: 4.5.2 --> 4.7-Tentative
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Anders Bjornerstedt - 2015-04-10

Milestone: 4.7-Tentative --> 4.5.1
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Mathi Naickan - 2015-04-10

Milestone: 4.5.1 --> 4.5.2
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Anders Widell - 2015-11-02

Milestone: 4.5.2 --> 4.6.2
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Mathi Naickan - 2016-05-04

Milestone: 4.6.2 --> 4.7.2
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Anders Widell - 2016-09-20

Milestone: 4.7.2 --> 5.0.2
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Anders Widell - 2017-04-03

Milestone: 5.0.2 --> future
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Vu Minh Nguyen - 2017-05-22

status: unassigned --> fixed

Blocker: --> False

Milestone: future --> 5.1.FC
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Vu Minh Nguyen - 2017-05-22

Fixed in enhacement ticket [#1315] since OpenSAF 5.1 release.

Related

Tickets: ~~#1315~~

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

LOG: String copy without length check or check if string

Milestone

Searches

Help

#1286 LOG: String copy without length check or check if string

Discussion

Related