Bug 951533

Summary:	btparser: btp_strbuf_grow should guard against integer overflow
Product:	[Fedora] Fedora	Reporter:	Florian Weimer <fweimer>
Component:	satyr	Assignee:	Martin Milata <mmilata>
Status:	CLOSED WONTFIX	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	20	CC:	abrt-devel-list, jfilak, jmoskovc, mmilata, mnowak
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-11-26 21:34:46 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	951431

Description Florian Weimer 2013-04-12 11:53:01 UTC

lib/strbuf.c:btp_strbuf_grow() does not guard against integer overflow.  As a result, the comment is not necessarily correct.

See <http://docs.fedoraproject.org/en-US/Fedora_Security_Team//html/Defensive_Coding/chap-Defensive_Coding-C.html> for some advice in this area.

Comment 1 Fedora End Of Life 2013-09-17 07:44:37 UTC

This bug appears to have been reported against 'rawhide' during the Fedora 20 development cycle.
Changing version to '20'.

More information and reason for this action is here:
https://fedoraproject.org/wiki/BugZappers/HouseKeeping/Fedora20

Comment 2 Martin Milata 2013-11-26 21:34:46 UTC

Package btparser has been retired from Fedora. The issue for satyr, its replacement, is tracked in bug #1034869.