diff options
author | cinap_lenrek <cinap_lenrek@felloff.net> | 2016-11-27 21:20:27 +0100 |
---|---|---|
committer | cinap_lenrek <cinap_lenrek@felloff.net> | 2016-11-27 21:20:27 +0100 |
commit | 6d424674113a6a6dd2566d82ba15f20d2d3090e7 (patch) | |
tree | acf91e8ff2f356e587261333122aa12ce22c6b84 /sys/src/9/omap | |
parent | 0edcb33ca1f01f8e3c18f5ad99442da8aad2091f (diff) |
stdio: fix sclose() buffer overrun when terminating string, realloc() error handling (thanks porlock)
theres a bug is in sclose() where it doesnt check if wp is beyond
the buffer. also wp was not updated after realloc().
bug was reported by porlock on 9fans:
Plan 9's implementation of the standard C functions snprintf and
vsnprintf have a buffer overrun bug.
If the buffer length equals the output length (without the terminating
null), then one too many characters is written to the buffer.
For example,
snprintf(buf, 4, "ABCD");
will write 5 characters to buf.
Diffstat (limited to 'sys/src/9/omap')
0 files changed, 0 insertions, 0 deletions