Ticket #46527

off by one buffer overflow

Eröffnet am: 2023-01-17 06:09 Letztes Update: 2023-03-21 08:38

Auswertung:
Verantwortlicher:
Typ:
Status:
Geschlossen
Komponente:
Meilenstein:
Priorität:
5 - Mittel
Schweregrad:
5 - Mittel
Lösung:
Gefixt
Datei:
1

Ticket-Verlauf (3/8 Historien)

2023-01-17 06:09 Aktualisiert von: mortmann
  • New Ticket "off by one buffer overflow" created
2023-01-17 06:21 Aktualisiert von: cazfi
Kommentar

Reply To mortmann

and the following statement is always TRUE and can therefore be removed:

More than that, the entire real_activities array can be removed now that there's no non-real activities (holes) in the activities enum. I just didn't do it in at the same commit as removal of those non-real activities.

As for the reported bug, is it present in older branches too? (Likely so, don't think the code has changed)

2023-03-18 12:33 Aktualisiert von: cazfi
Kommentar

Reply To cazfi

As for the reported bug, is it present in older branches too? (Likely so, don't think the code has changed)

No that I looked at it; yes and no. Older branches avoid actual over-boundaries write by luck. As they have also dummy activities included in the ACTIVITY_LAST count used in determining the size of the target array.

2023-03-18 12:33 Aktualisiert von: cazfi
  • Meilenstein Update from (Keine) to 3.0.7 (closed)
  • Komponente Update from (Keine) to General
2023-03-18 12:45 Aktualisiert von: cazfi
2023-03-18 12:56 Aktualisiert von: cazfi
  • Verantwortlicher Update from (Keine) to cazfi
  • Lösung Update from Keine to Accepted
2023-03-21 08:38 Aktualisiert von: cazfi
  • Status Update from Offen to Geschlossen
  • Lösung Update from Accepted to Gefixt

Bearbeiten

Please login to add comment to this ticket » Anmelden