10000 Xslt: fixed handle vsnprintf return value by afonot · Pull Request #747 · nginx/nginx · GitHub

Xslt: fixed handle vsnprintf return value #747

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

afonot wants to merge 1 commit into nginx:master from afonot:vsnprintf-error-handling

+12 −2

afonot commented

The result of vsnprintf was cast to size_t, which could lead to a signed-to-unsigned overflow error.
There was no handling for cases where vsnprintf returns a negative value, zero, or a value greater than NGX_MAX_ERROR_STR.


          Xslt: fixed handle vsnprintf return value

18d8ca5

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

0