[CVE-2018-17942] vasnprintf: Fix heap memory overrun bug. 28/258828/1 accepted/tizen_6.5_base accepted/tizen_6.5_base_tool accepted/tizen_7.0_base accepted/tizen_7.0_base_hotfix accepted/tizen_7.0_base_tool accepted/tizen_7.0_base_tool_hotfix accepted/tizen_8.0_base accepted/tizen_9.0_base accepted/tizen_base accepted/tizen_base_riscv accepted/tizen_base_tool tizen_6.5_base tizen_7.0_base tizen_7.0_base_hotfix tizen_8.0_base tizen_9.0_base tizen_base accepted/tizen/6.5/base/20230714.002428 accepted/tizen/6.5/base/tool/20211027.112430 accepted/tizen/7.0/base/20230714.002838 accepted/tizen/7.0/base/hotfix/20230714.003654 accepted/tizen/7.0/base/tool/20221028.112928 accepted/tizen/7.0/base/tool/hotfix/20221115.084721 accepted/tizen/8.0/base/20231005.044609 accepted/tizen/9.0/base/20241030.075840 accepted/tizen/base/20230714.003244 accepted/tizen/base/riscv/20231124.082756 accepted/tizen/base/tool/20210531.013808 submit/tizen_6.5_base/20211026.180901 submit/tizen_6.5_base/20211027.183101 submit/tizen_6.5_base/20211027.200501 submit/tizen_7.0_base/20221028.200901 submit/tizen_7.0_base_hotfix/20221115.161501 submit/tizen_base/20210528.005548 tizen_6.5.m2_release tizen_7.0_m2_release tizen_8.0_m2_release tizen_9.0_m2_release
authorDongkyun Son <dongkyun.s@samsung.com>
Wed, 26 May 2021 08:18:14 +0000 (17:18 +0900)
committerDongkyun Son <dongkyun.s@samsung.com>
Wed, 26 May 2021 08:19:53 +0000 (17:19 +0900)
commit2c7d533d2593b87dde99836689b43465ee5852ee
tree4f19e309d00995bc944711e372c6985f18ec7d81
parent685f578a6726f362b53e412dca469c659a75a94a
[CVE-2018-17942] vasnprintf: Fix heap memory overrun bug.

Reported by Ben Pfaff <blp@cs.stanford.edu> in
<https://lists.gnu.org/archive/html/bug-gnulib/2018-09/msg00107.html>.

* lib/vasnprintf.c (convert_to_decimal): Allocate one more byte of
memory.
* tests/test-vasnprintf.c (test_function): Add another test.

Change-Id: I9375c9f006d83bff07820a8c1fba251435a14faa
Signed-off-by: Dongkyun Son <dongkyun.s@samsung.com>
lib/vasnprintf.c