bugAVR C Runtime Library - Bugs: bug #19280, snprintf(s,0,fmt,...) write to...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #19280: snprintf(s,0,fmt,...) write to foreign memory: s[-1]

Submitter:  Dmitry Xmelkov <dmix>
Submitted:  Sun 11 Mar 2007 05:16:44 AM UTC
   
 
Category:  None Severity:  3 - Normal
Priority:  9 - Immediate Item Group:  None
Status:  Fixed Assigned to:  None
Percent Complete:  0% Open/Closed:  Closed
Release:  None Fixed Release:  None

Sun 25 Mar 2007 02:58:07 PM UTC, comment #3: 

Fixed at CVS 1.4 branch.

Dmitry Xmelkov <dmix>
Group administrator
Sun 25 Mar 2007 12:59:37 AM UTC, comment #2: 

Is it too difficult to fix this in the 1.4 branch?

Eric

Eric Weddington <arcanum>
Group administrator
Wed 21 Mar 2007 01:06:10 PM UTC, comment #1: 

Fixed at CVS MAIN branch.

Dmitry Xmelkov <dmix>
Group administrator
Sun 11 Mar 2007 05:16:44 AM UTC, original submission:  

Size is decremented (to reserve space for trailing zero)
without an underflow control. Comparison below is signed.
And there is a second misprint: the return value of vfprintf()
is used as a number of writed symbols. This is not always: it may return EOF.

Correction (all 4 functions) is done, will submited after
tests writing.

Dmitry Xmelkov <dmix>
Group administrator

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by arcanum (Posted a comment)
  • -email is unavailable- added by dmix (Submitted the item)
  •  

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2007-07-01 dmix StatusNone Fixed
    2007-03-25 dmix Open/ClosedOpen Closed
    2007-03-25 arcanum Priority5 - Normal 9 - Immediate

    Back to the top

    Powered by Savane 3.13-02a9.
    Corresponding source code