bugGPSD - Bugs: bug #43953, Incorrect uses of "safe"...

 
 

bug #43953: Incorrect uses of "safe" string functions

Submitted by:  Zbigniew Chyla <zchyla_nokia>
Submitted on:  Thu 08 Jan 2015 04:07:08 PM UTC  
 
Category: NoneSeverity: 3 - Normal
Item Group: NoneStatus: Fixed
Privacy: PublicAssigned to: Eric S. Raymond <esr>
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Thu 08 Jan 2015 04:07:08 PM UTC, original submission:

I've found a few incorrect uses of "safe" string functions (strncmp, strncat, strncpy, strlcat, strlcpy), which void protection against overflows these functions are supposed to provide.

See details in the attachments.

Zbigniew Chyla <zchyla_nokia>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #32791:  0006-Replace-the-last-strncat-call-with-strlcat.patch added by zchyla_nokia (907B - text/x-patch - [PATCH 6/6] Replace the last strncat call with strlcat)
file #32790:  0005-Fix-incorrect-use-of-strlcpy.patch added by zchyla_nokia (967B - text/x-patch - [PATCH 5/6] Fix incorrect use of strlcpy)
file #32789:  0004-Replace-incorrect-use-of-strncpy-with-strlcpy.patch added by zchyla_nokia (763B - text/x-patch - [PATCH 4/6] Replace incorrect use of strncpy with strlcpy)
file #32788:  0003-Replace-incorrect-use-of-strncat-with-strlcat.patch added by zchyla_nokia (731B - text/x-patch - [PATCH 3/6] Replace incorrect use of strncat with strlcat)
file #32787:  0002-Fix-incorrect-use-of-strlcat.patch added by zchyla_nokia (771B - text/x-patch - [PATCH 2/6] Fix incorrect use of strlcat)
file #32786:  0001-Fix-incorrect-string-size-passed-to-strncmp.patch added by zchyla_nokia (787B - text/x-patch - [PATCH 1/6] Fix incorrect string size passed to strncmp)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by esr (Updated the item)
  • -unavailable- added by zchyla_nokia (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 9 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sun 22 Feb 2015 05:03:25 PM UTCesrOpen/ClosedOpen=>Closed
    Tue 13 Jan 2015 12:18:14 PM UTCesrStatusNone=>Fixed
      Assigned toNone=>esr
    Thu 08 Jan 2015 04:10:17 PM UTCzchyla_nokiaAttached File-=>Added 0006-Replace-the-last-strncat-call-with-strlcat.patch, #32791
    Thu 08 Jan 2015 04:10:00 PM UTCzchyla_nokiaAttached File-=>Added 0005-Fix-incorrect-use-of-strlcpy.patch, #32790
    Thu 08 Jan 2015 04:09:10 PM UTCzchyla_nokiaAttached File-=>Added 0004-Replace-incorrect-use-of-strncpy-with-strlcpy.patch, #32789
    Thu 08 Jan 2015 04:08:53 PM UTCzchyla_nokiaAttached File-=>Added 0003-Replace-incorrect-use-of-strncat-with-strlcat.patch, #32788
    Thu 08 Jan 2015 04:08:34 PM UTCzchyla_nokiaAttached File-=>Added 0002-Fix-incorrect-use-of-strlcat.patch, #32787
    Thu 08 Jan 2015 04:08:04 PM UTCzchyla_nokiaAttached File-=>Added 0001-Fix-incorrect-string-size-passed-to-strncmp.patch, #32786

    Back to the top


    Powered by Savane 3.1-cleanup1