This is the mail archive of the libc-alpha@sourceware.org mailing list for the glibc project.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

Re: [PATCH] avoid buffer overflow in sunrpc clnt_create (BZ #22542)

From: Paul Eggert <eggert at cs dot ucla dot edu>
To: Martin Sebor <msebor at gmail dot com>, Carlos O'Donell <carlos at redhat dot com>, GNU C Library <libc-alpha at sourceware dot org>
Date: Mon, 4 Dec 2017 00:04:12 -0800
Subject: Re: [PATCH] avoid buffer overflow in sunrpc clnt_create (BZ #22542)
Authentication-results: sourceware.org; auth=none
References: <f6a8c32f-f524-9ebb-03bc-4484f8a80a16@gmail.com> <2ab77d63-7f68-1c60-40d2-71a9bef5f21f@cs.ucla.edu> <20171204015531.GA8729@altlinux.org>

Dmitry V. Levin wrote:

Do people really expect that?  Assuming that people are aware
of linux kernel behaviour, why would they expect that?

These days, it's because strncpy format is obsolete and is not somethingprogrammers are ordinarily aware of. When in doubt (which there seems to behere), glibc should use null-terminated strings rather than strncpy format.

References:
- [PATCH] avoid buffer overflow in sunrpc clnt_create (BZ #22542)
  - From: Martin Sebor
- Re: [PATCH] avoid buffer overflow in sunrpc clnt_create (BZ #22542)
  - From: Paul Eggert
- Re: [PATCH] avoid buffer overflow in sunrpc clnt_create (BZ #22542)
  - From: Dmitry V. Levin

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]