To comment on the following update, log in, then open the issue:
http://www.openoffice.org/issues/show_bug.cgi?id=69162
                 Issue #|69162
                 Summary|strings passed to sscanf not guaranteed to be null ter
                        |minated
               Component|porting
                 Version|OOo 2.0.3
                Platform|All
                     URL|
              OS/Version|Linux
                  Status|NEW
       Status whiteboard|
                Keywords|
              Resolution|
              Issue type|PATCH
                Priority|P3
            Subcomponent|code
             Assigned to|mh
             Reported by|cmc





------- Additional comments from [EMAIL PROTECTED] Fri Sep  1 01:37:36 -0700 
2006 -------
i.e. we read in up to 512 bytes into a 512 byte buffer from /proc/$PID/status so
the string is not null terminated if >= 512 bytes are available from "status"
and we pass this buffer to sscanf.

Not a huge problem as the data we need is always available early in this 512
bytes for sscanf to find, so sscanf shouldn't trundle past the end of the
buffer. On the other hand valgrind tells me that sscanf does just this under
some optimization settings on x86_64.

---------------------------------------------------------------------
Please do not reply to this automatically generated notification from
Issue Tracker. Please log onto the website and enter your comments.
http://qa.openoffice.org/issue_handling/project_issues.html#notification

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to