Secfile save buffer overflow with fc_vsnprintf() fallback implementation

• Rapporteur: cazfi
• Propriétaire: cazfi
• Type: Bogues
• État: Atteints
• Composant: General
• Jalon: 3.0.4 (atteints)
• Priorité: 5 - moyen
• Sévérité: 5 - moyen
• Résolution: Fixed
• Fichier: 2

Détails

fc_vsnprintf() fallback implementation uses internal buffer of 64k (VSNP_BUF_SIZE). While secfile to save is being prepared, ioz.c might request it to handle buffer of size 8096k (PLAIN_FILE_BUF_SIZE).

Noticed while testing WIP patch for #45629 that also adds missing overflow checking to fc_vsnprintf().

Ticket History (3/5 Histories)

2022-09-22 01:20 Updated by: cazfi

• New Ticket "Secfile save buffer overflow with fc_vsnprintf() fallback implementation" created

2022-09-22 01:34 Updated by: cazfi

• File 0038-Increase-size-of-the-buffer-of-fc_vsnprintf-fallback.patch (File ID: 10350) is attached

2022-09-22 01:35 Updated by: cazfi

• File 0025-Increase-size-of-the-buffer-of-fc_vsnprintf-fallback.patch (File ID: 10351) is attached

2022-09-22 01:35 Updated by: cazfi

• Propriétaire Update from (Aucun) to cazfi
• Résolution Update from Aucun to Accepted

Commentaire

Also to S2_6

2022-09-25 07:34 Updated by: cazfi

• État Update from Ouvert to Atteints
• Résolution Update from Accepted to Fixed