bugAVR C Runtime Library - Bugs: bug #19280, snprintf(s,0,fmt,...) write to...

 
 

bug #19280: snprintf(s,0,fmt,...) write to foreign memory: s[-1]

Submitted by:  Dmitry Xmelkov <dmix>
Submitted on:  Sun 11 Mar 2007 05:16:44 AM UTC  
 
Category: NoneSeverity: 3 - Normal
Priority: 9 - ImmediateItem Group: None
Status: FixedPercent Complete: 0%
Assigned to: NoneOpen/Closed: Closed
Release: NoneFixed Release: None

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Sun 25 Mar 2007 02:58:07 PM UTC, comment #3:

Fixed at CVS 1.4 branch.

Dmitry Xmelkov <dmix>
Project Administrator
Sun 25 Mar 2007 12:59:37 AM UTC, comment #2:

Is it too difficult to fix this in the 1.4 branch?

Eric

Eric Weddington <arcanum>
Project Administrator
Wed 21 Mar 2007 01:06:10 PM UTC, comment #1:

Fixed at CVS MAIN branch.

Dmitry Xmelkov <dmix>
Project Administrator
Sun 11 Mar 2007 05:16:44 AM UTC, original submission:

Size is decremented (to reserve space for trailing zero)
without an underflow control. Comparison below is signed.
And there is a second misprint: the return value of vfprintf()
is used as a number of writed symbols. This is not always: it may return EOF.

Correction (all 4 functions) is done, will submited after
tests writing.

Dmitry Xmelkov <dmix>
Project Administrator

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by arcanum (Posted a comment)
  • -unavailable- added by dmix (Submitted the item)
  •  

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 3 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sun 01 Jul 2007 02:10:41 AM UTCdmixStatusNone=>Fixed
    Sun 25 Mar 2007 02:58:07 PM UTCdmixOpen/ClosedOpen=>Closed
    Sun 25 Mar 2007 12:59:37 AM UTCarcanumPriority5 - Normal=>9 - Immediate

    Back to the top


    Powered by Savane 3.1-cleanup1