More bug reports
Posted: 2014-04-04T13:19:24-07:00
- typo
xml-tree.c 2564
char *XMLTreeTagToXML(XMLTreeInfo *xml_info,char **source,size_t *length, size_t *extent,size_t start,char ***attributes)
-----------------------------------------------
possible single-byte overflow on Windows
nt-base.c 1560
nt-base.c 1571
strncat() copies up to n chars and then appends a \0, thus writing a total of n+1 bytes. The supplied value for n should be "sizeof(strbuf) - strlen(strbuf) - 1".
xml-tree.c 2564
char *XMLTreeTagToXML(XMLTreeInfo *xml_info,char **source,size_t *length, size_t *extent,size_t start,char ***attributes)
Code: Select all
*source=(char *) ResizeQuantumMemory(*source,*extent,sizeof(*source)); // should be sizeof(**source)
possible single-byte overflow on Windows
nt-base.c 1560
nt-base.c 1571
Code: Select all
if(wcsncat(file_specification,(const wchar_t*) DirectorySeparator, MaxTextExtent) == (wchar_t*)NULL)
Code: Select all
if(wcsncat(file_specification,(const wchar_t*) DirectorySeparator, MaxTextExtent - wcslen(file_specification) - 1) == (wchar_t*)NULL)