This is the mail archive of the
systemtap@sourceware.org
mailing list for the systemtap project.
Re: Staprun buffer overflow
- From: Martin Hunt <hunt at redhat dot com>
- To: David Wilder <dwilder at us dot ibm dot com>
- Cc: systemtap at sources dot redhat dot com
- Date: Mon, 11 Dec 2006 14:33:59 -0500
- Subject: Re: Staprun buffer overflow
- Organization: Red Hat Inc.
- References: <457D9B1C.5050806@us.ibm.com>
On Mon, 2006-12-11 at 09:53 -0800, David Wilder wrote:
> I found a couple of buffer overrun conditions is in
> runtime/stpd/symbols.c:get_sections() occurring in sprintf()
> calls.
OK, that's embarrassing. Obviously "dir" and "filename" are too small
and I forgot to check for overflows. I'll check in a fix.
Martin