[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Buffer overflow in makeinfo/sectioning.c
From: |
Dr. Werner Fink |
Subject: |
Buffer overflow in makeinfo/sectioning.c |
Date: |
Mon, 19 Nov 2012 15:50:53 +0100 |
User-agent: |
Mutt/1.5.21 (2010-09-15) |
Hi,
in the function current_chapter_number() there is a buffer overflow
which is fixed by this patch:
--------------------------* snip *---------------------------------
--- makeinfo/sectioning.c
+++ makeinfo/sectioning.c 2012-11-19 14:10:54.639587164 +0000
@@ -256,7 +256,7 @@ current_chapter_number (void)
return xstrdup ("");
else if (enum_marker == APPENDIX_MAGIC)
{
- char s[1];
+ char s[2];
sprintf (s, "%c", numbers[0] + 64);
return xstrdup (s);
}
--------------------------* snap *---------------------------------
Werner
--
"Having a smoking section in a restaurant is like having
a peeing section in a swimming pool." -- Edward Burr
- Buffer overflow in makeinfo/sectioning.c,
Dr. Werner Fink <=