Status: New
Owner: ----
Labels: Type-Defect Priority-Medium

New issue 390 by [email protected]: Out of bounds read (Buffer overrun)
https://code.google.com/p/memcached/issues/detail?id=390

In items.c, a buffer overrun may occur due to incorrect calculation.



7. cond_between: Checking sid > 200U implies that sid has the value which is between 1 and 200 (inclusive) on the false branch.
 926            if (!safe_strtoul(p, &sid) || sid < POWER_SMALLEST

8. overrun-local: Overrunning array tocrawl of 200 bytes at byte offset 200 using index sid (which evaluates to 200).
 932            tocrawl[sid] = 1;



Thanks,


--
You received this message because this project is configured to send all issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

--

--- You received this message because you are subscribed to the Google Groups "memcached" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to