News:

Use the "Forum Search"
It may help you to find anything in the forum ;).

Potential buffer overflow in pakselector.cc

Started by Spike, March 20, 2012, 09:59:04 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Print
Go Down Pages1
User actions

Spike

March 20, 2012, 09:59:04 AM Last Edit: March 20, 2012, 10:38:42 AM by Hans
If the path is bigger than 1024 characters, this will cause a buffer overflow:

Code Select

    FOR(slist_tpl<entry>, const& i, entries) {
        char path[1024];
        sprintf(path,"%saddons/%s", umgebung_t::user_dir, i.button->get_text());


Edit: There are two of these problems in pakselector.cc, I think.
Print
Go Up Pages1
User actions