| commit | 47cb886328acf41612165a93e05af3db3d20ee17 | |
| author | Paul Pluzhnikov <ppluzhnikov@google.com> | |
| Fri, 6 Feb 2015 05:30:42 +0000 (6 00:30 -0500) | ||
| committer | Adhemerval Zanella <azanella@linux.vnet.ibm.com> | |
| Mon, 23 Feb 2015 13:54:34 +0000 (23 08:54 -0500) | ||
| tree | c1a63fb509fda0de2345037ced7e023cc57f9bd7 | treesnapshot (tar.gz zip) |
| parent | d3b0c8db9a4080c4f8a71cbf6912c05422094594 | commitdiff |
CVE-2015-1472: wscanf allocates too little memory
BZ #16618
Under certain conditions wscanf can allocate too little memory for the
to-be-scanned arguments and overflow the allocated buffer. The
implementation now correctly computes the required buffer size when
using malloc.
A regression test was added to tst-sscanf.
Conflicts:
ChangeLog
NEWS
BZ #16618
Under certain conditions wscanf can allocate too little memory for the
to-be-scanned arguments and overflow the allocated buffer. The
implementation now correctly computes the required buffer size when
using malloc.
A regression test was added to tst-sscanf.
Conflicts:
ChangeLog
NEWS
| ChangeLog | diffblobblamehistory | |
| NEWS | diffblobblamehistory | |
| stdio-common/tst-sscanf.c | diffblobblamehistory | |
| stdio-common/vfscanf.c | diffblobblamehistory |