[Bug libc/3082] fopen corrupts file name buffer when file name is 44 chars long

jakub at redhat dot com sourceware-bugzilla@sourceware.org
Thu Aug 17 18:09:00 GMT 2006


------- Additional Comments From jakub at redhat dot com  2006-08-17 18:09 -------
The testcase is broken, it corrupts memory itself.
You malloc a 44 byte long buffer and then you copy a 45 byte long string into
it with strcpy (the last byte is the '\0' terminator).

-- 
           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID


http://sourceware.org/bugzilla/show_bug.cgi?id=3082

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.



More information about the Glibc-bugs mailing list