DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=27769>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=27769

IconvFBSD transcode()  string termination problem

           Summary: IconvFBSD transcode()  string termination problem
           Product: Xerces-C++
           Version: 2.5.0
          Platform: All
        OS/Version: FreeBSD
            Status: NEW
          Severity: Major
          Priority: Other
         Component: Utilities
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


for TRANSCODER==IconvFBSD there has beena bug that transcode()
did return an (almost) empty string depending on input.

The original string was properly terminated and another \0 has been
written at an "invalid" offset; offset is always < strlen() so this
is no exploitable problem I think but simply generates wrong results.

Reported-By: Sean McNeil <sean at mcneil.com>

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to