src/wikiformat.c : is_ticket
in_this_repo is checked whether n is maximum size of char array,
https://www.fossil-scm.org/index.html/artifact?ln=1090-1092&name=1616c95201d38f46
but is_ticket is not checked whether n is the maximum size of char array
before call memcpy.
https://www.fossil-scm.org/index.html/artifact?ln=1117-1118&name=1616c95201d38f46
_______________________________________________
fossil-users mailing list
fossil-users@lists.fossil-scm.org
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
