Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
safely concatenating strings in portable C (Re: GnuPG 1.4 and 2.0 buffer overflow) Nov 30 2006 01:41AM
Solar Designer (solar openwall com)
On Mon, Nov 27, 2006 at 06:13:02PM +0100, Werner Koch wrote:
> + n = strlen(s) + (defname?strlen (defname):0) + 10;
> prompt = xmalloc(n);
> if( defname )
> sprintf(prompt, "%s [%s]: ", s, defname );
...
> Note, that using snprintf would not have helped in
> this case. How I wi...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus