Skip to content

possible buffer overflow when the input filename is too long #12

@okias

Description

@okias

Hello.

Source code says:

char output_name[200]; /* FIXME: dangerous limit */
[...]
input_name = argv[optind];
[...]
strcpy (output_name, input_name);

This can't be good. Gentoo patchset doesn't cover this.

Please fix.

[1] https://bugs.gentoo.org/594444

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions