You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The OS_SymTableIterator() name arg could be too long and could be strncpy/copied without a terminating null into SymbolRecord_t's char SymbolName[OS_MAX_SYM_LEN];. This unterminated null would then be written into the OS_sym_table_file_fd.
See osloader.c, ln 189.
Recommend: an explicit name length check:
{{{
if (strlen >= OS_MAX_SYM_LEN) {
return(FALSE);
}
}}}
before strncpy.
The OS_SymTableIterator() name arg could be too long and could be strncpy/copied without a terminating null into SymbolRecord_t's char SymbolName[OS_MAX_SYM_LEN];. This unterminated null would then be written into the OS_sym_table_file_fd.
See osloader.c, ln 189.
Recommend: an explicit name length check:
{{{
if (strlen >= OS_MAX_SYM_LEN) {
return(FALSE);
}
}}}
before strncpy.
(Discovered as part of #45 coverage testing.)
The text was updated successfully, but these errors were encountered: