View Issue Details

IDProjectCategoryView StatusLast Update
0005326GNUnetutil librarypublic2019-02-28 10:17
ReporterMarcello Stanisci Assigned ToFeideus Due Date
PrioritylowSeveritytweakReproducibilityalways
Status closedResolutionfixed 
Target Version0.11.0Fixed in Version0.11.0 
Summary0005326: getopt blindly accept any number given on the command line
DescriptionSay that a option '-n' is registered with GNUNET_GETOPT_option_uint(),
and that it is then passed as '-n -4' from a command line invocation.

The parsing helper (set_uint() function) will feed whatever value
-4 is into memory to sscanf, which will silently parse it as "%u".

This then gives some unexpected value that is not possible to check,
as it *is* unsigned int indeed.
TagsNo tags attached.

Activities

Feideus

2018-06-24 10:24

reporter   ~0013066

Added check in the case of a %u negative value.

Issue History

Date ModifiedUsernameFieldChange
2018-05-10 09:18Marcello StanisciNew Issue
2018-06-23 13:13FeideusAssigned To => Feideus
2018-06-23 13:13FeideusStatusnew => assigned
2018-06-24 10:24FeideusStatusassigned => resolved
2018-06-24 10:24FeideusResolutionopen => fixed
2018-06-24 10:24FeideusNote Added: 0013066
2019-02-12 08:20Christian GrothoffTarget Version => 0.11.0
2019-02-20 11:24Christian GrothoffFixed in Version => 0.11.0
2019-02-28 10:17Christian GrothoffStatusresolved => closed