[CVE-2018-17942] vasnprintf: Fix heap memory overrun bug. 48/254248/1
authorJinWang An <jinwang.an@samsung.com>
Thu, 25 Feb 2021 04:06:17 +0000 (13:06 +0900)
committerJinWang An <jinwang.an@samsung.com>
Thu, 25 Feb 2021 04:09:35 +0000 (13:09 +0900)
commit875a98baebfca49e1ecdad28562ccaa2e57e9b3a
treed3cab90118d1e363854f18d8dd2049a035f2f0f1
parent3d6ab5b72718bc12c359761feb84e2f49d6c6852
[CVE-2018-17942] vasnprintf: Fix heap memory overrun bug.

Reported by Ben Pfaff <blp@cs.stanford.edu> in
<https://lists.gnu.org/archive/html/bug-gnulib/2018-09/msg00107.html>.

* lib/vasnprintf.c (convert_to_decimal): Allocate one more byte of
memory.
* tests/test-vasnprintf.c (test_function): Add another test.

Change-Id: Ia26b9cf4ddc7fb15856dd283ad32d50e7204e046
Signed-off-by: JinWang An <jinwang.an@samsung.com>
lib/vasnprintf.c
tests/test-vasnprintf.c