Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

log.c: Fix crash due negative buffer size #272

Closed
wants to merge 1 commit into from

Conversation

zdohnal
Copy link
Contributor

@zdohnal zdohnal commented Apr 12, 2023

A higher pointer address is subtracted from lower pointer address in write_log, which causes crash if pappl is built with _FORTIFY_SOURCE=3.

It can be reproduced by starting lprint service.

A higher pointer address is subtracted from lower pointer address in
`write_log`, which causes crash if pappl is built with
_FORTIFY_SOURCE=3.

It can be reproduced by starting `lprint` service.
@zdohnal
Copy link
Contributor Author

zdohnal commented Apr 12, 2023

Ok, I didn't know Github project can be set to require signing - learnt something new :) .

@michaelrsweet
Copy link
Owner

[master 9637431] Fix a potential buffer overflow in the logging code (Issue #272)

[v1.3.x 0c69b3d] Mirror fix from master.

@michaelrsweet michaelrsweet self-assigned this Apr 12, 2023
@michaelrsweet michaelrsweet added bug Something isn't working security Security issue priority-medium labels Apr 12, 2023
@michaelrsweet michaelrsweet added this to the Stable milestone Apr 12, 2023
@zdohnal
Copy link
Contributor Author

zdohnal commented Apr 12, 2023

Thanks, @michaelrsweet !

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working priority-medium security Security issue
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants