buffer overflow in iso8601 date

Status: Beta

Brought to you by: danda, robincornelius

#5 buffer overflow in iso8601 date

Status: closed-accepted

Owner: nobody

Labels: None

Priority: 5

Updated: 2008-04-14

Created: 2002-10-26

Creator: Jeff Lawson

Private: No

the date_from_ISO8601 function in xmlrpc.c:140 has a
bufferoverflow in 'buf'

Discussion

Jeff Lawson - 2002-10-26

patch to enlarge buffer and provide buffer length check

xmlrpc-epi-0.51-patch-ab.txt

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Jeff Lawson - 2002-11-02

updated version of patch with relocated buffer length check

xmlrpc-epi-0.51-patch-ab.txt

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Nobody/Anonymous - 2008-04-09

Logged In: NO

This patch still appears to be relevant to the recently released 0.53 version.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Jeff Lawson - 2008-04-14

Logged In: YES
user_id=511066
Originator: YES

This patch (and other changes) was just committed to CVS:

http://xmlrpc-epi.cvs.sourceforge.net/xmlrpc-epi/xmlrpc/src/xmlrpc.c?r1=1.31&r2=1.32

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Jeff Lawson - 2008-04-14

status: open --> closed-accepted
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Log in to post a comment.