uses of sprintf
- uses constants to allocate buffers in many places for logging. it looks like
these functions
are called with fixed/checked arguments.
- many constants seem to be ad hoc and undocumented
- e.g. usr/lib/pkcs11/cca_stdll/loadsave.c (load_token_data): fname uses a big
buffer, not
MAX_PATH_LEN (which at least is used somewhere else).
- usr/lib/pkcs11/tpm_stdll/tpm_openssl.c: openssl_write_key/openssl_read_key:
fixed buffer for filenames
-> in many places, the constant 2048 is used for path lengths (however
MAX_PATH currently is
4096 on Linux). this should be fixed unless we are sure that all paths
used do fit the fixed buffer
** Changed in: opencryptoki (Ubuntu)
Status: New => Incomplete
--
main inclusion request: opencryptoki
https://bugs.launchpad.net/bugs/247593
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs