Bug 4405 - ecvt(3) access momry not bounded to static array.
ecvt(3) access momry not bounded to static array.
Status: CLOSED CURRENTRELEASE
Product: Red Hat Linux
Classification: Retired
Component: glibc (Show other bugs)
6.0
All Linux
high Severity medium
: ---
: ---
Assigned To: Cristian Gafton
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 1999-08-06 15:07 EDT by erez
Modified: 2008-05-01 11:37 EDT (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 1999-08-10 21:59:32 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:


Attachments (Terms of Use)

  None (edit)
Description erez 1999-08-06 15:07:04 EDT
The ecvt man page/spcifications doesn't set a limit
to the number of digits that can be requested.
The following code will crash:
------------------------------------
# include <stdio.h>
# include <stdlib.h>

int main ()
{
        int i, j, n = 0;
        ecvt (2.0/3.0, 10000, &i, &j);
        return 0;
}
----------------------------
it should not crash.

Erez Strauss <erez@newplaces.com>
Comment 1 Cristian Gafton 1999-08-10 21:59:59 EDT
Fixed in the newer releases of glibc available from rawhide.

Note You need to log in before you can comment on or make changes to this bug.