Ticket #241 (new defect) — at Initial Version

Opened 16 years ago

Last modified 15 years ago

buffer overflow in __mhl_str_concat_hlp

Reported by: Patrick Winnertz <winnie@…> Owned by:
Priority: major Milestone:
Component: mc-core Version: 4.6.2
Keywords: committed-master committed-mc-4.6 Cc:
Blocked By: Blocking:
Branch state: Votes for changeset:

Description

Hey,

There is currently a bufferoverflow in mhl_str_concat_hlp if the function is
called with more than 32 parameters.

This will fix this:

while ((a = va_arg(args, char*)) != (char*)1 && count <=31) { ... }
Note: See TracTickets for help on using tickets.