projects / platform / upstream / rpm.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: df603a2) | patch
Take length of format width specifier into account for format string buffer
authorPanu Matilainen <Panu Matilainen pmatilai@redhat.com>
Wed, 17 Aug 2011 06:03:44 +0000 (09:03 +0300)
committerPanu Matilainen <Panu Matilainen pmatilai@redhat.com>
Wed, 17 Aug 2011 06:03:44 +0000 (09:03 +0300)
commit4387be59b3a541a3bf91546fdf396fdc76cc7a24
treed333a96b50134694923c657423aa1b5ab474900btree | snapshot
parentdf603a246850aa2b912547ba8f20f34ba1cc3626commit | diff
Take length of format width specifier into account for format string buffer

- Prevents buffer overflow in case of ridiculous field width specifiers
  like --qf "%100000000000000000000000000{name}". There's another similar
  static-sized buffer in rpmtdFormat() but there we're not dealing
  with user-speficied format strings so its okay even if ugly.
- The format string handling wants a bigger overhaul but this makes
  for a nice little backportable patch for starters.
lib/headerfmt.c diff | blob | history
Domain: SCM / Build;