CVE-2012-3406: Stack overflow in vfprintf [BZ #16617]
commita5357b7ce2a2982c5778435704bcdb55ce3667a0
authorJeff Law <law@redhat.com>
Mon, 15 Dec 2014 09:09:32 +0000 (15 10:09 +0100)
committerFlorian Weimer <fweimer@redhat.com>
Mon, 15 Dec 2014 09:09:33 +0000 (15 10:09 +0100)
tree1292d6cb3f935bf84f07a1acc2fc92409dce1084
parent3a12c70f137707074209241e6c6172ea25f9ab4a
CVE-2012-3406: Stack overflow in vfprintf [BZ #16617]

A larger number of format specifiers coudld cause a stack overflow,
potentially allowing to bypass _FORTIFY_SOURCE format string
protection.
ChangeLog
NEWS
stdio-common/Makefile
stdio-common/bug23-2.c [new file with mode: 0644]
stdio-common/bug23-3.c [new file with mode: 0644]
stdio-common/bug23-4.c [new file with mode: 0644]
stdio-common/vfprintf.c