Ticket #241 (new defect) — at Initial Version
buffer overflow in __mhl_str_concat_hlp
Reported by: | Patrick Winnertz <winnie@…> | Owned by: | |
---|---|---|---|
Priority: | major | Milestone: | |
Component: | mc-core | Version: | 4.6.2 |
Keywords: | committed-master committed-mc-4.6 | Cc: | |
Blocked By: | Blocking: | ||
Branch state: | Votes for changeset: |
Description
Hey,
There is currently a bufferoverflow in mhl_str_concat_hlp if the function is
called with more than 32 parameters.
This will fix this:
while ((a = va_arg(args, char*)) != (char*)1 && count <=31) { ... }
Note: See
TracTickets for help on using
tickets.