summaryrefslogtreecommitdiff
path: root/sys/src/9/omap
diff options
context:
space:
mode:
authorcinap_lenrek <cinap_lenrek@felloff.net>2016-11-27 21:20:27 +0100
committercinap_lenrek <cinap_lenrek@felloff.net>2016-11-27 21:20:27 +0100
commit6d424674113a6a6dd2566d82ba15f20d2d3090e7 (patch)
treeacf91e8ff2f356e587261333122aa12ce22c6b84 /sys/src/9/omap
parent0edcb33ca1f01f8e3c18f5ad99442da8aad2091f (diff)
stdio: fix sclose() buffer overrun when terminating string, realloc() error handling (thanks porlock)
theres a bug is in sclose() where it doesnt check if wp is beyond the buffer. also wp was not updated after realloc(). bug was reported by porlock on 9fans: Plan 9's implementation of the standard C functions snprintf and vsnprintf have a buffer overrun bug. If the buffer length equals the output length (without the terminating null), then one too many characters is written to the buffer. For example, snprintf(buf, 4, "ABCD"); will write 5 characters to buf.
Diffstat (limited to 'sys/src/9/omap')
0 files changed, 0 insertions, 0 deletions