[bug #36641] Crash when using ridiculously large target names

[anonymous]

URL:
  <http://savannah.gnu.org/bugs/?36641>

                 Summary: Crash when using ridiculously large target names
                 Project: make
            Submitted by: None
            Submitted on: Tue 12 Jun 2012 05:16:49 PM UTC
                Severity: 3 - Normal
              Item Group: Bug
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any
       Component Version: 3.82
        Operating System: Any
           Fixed Release: None
           Triage Status: None

    _______________________________________________________

Details:

If the stem len is bigger than PATH_MAX, it results in a buffer over run:

455a456
>         unsigned int stemlen_copy;
494,495c495,497
<           strncpy (stem_str, stem, stemlen);
<           stem_str[stemlen] = '\0';
---
>           stemlen_copy = stemlen > sizeof(stem_str) ? sizeof(stem_str) :
stemlen;
>           strncpy (stem_str, stem, stemlen_copy);
>           stem_str[stemlen_copy] = '\0';





    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?36641>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/