View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0006157GNUnetutil librarypublic2020-04-03 10:442020-07-09 07:17
Reporterfefe Assigned ToChristian Grothoff Due Date
PrioritynormalSeverityminorReproducibilityN/A
Status closedResolutionfixed 
Product VersionGit master 
Target Version0.13.0Fixed in Version0.13.0 
Summary0006157: Integer truncation in GNUNET_STRINGS_string_to_data
Description 954 int
 955 GNUNET_STRINGS_string_to_data (const char *enc,
 956 size_t enclen,
 957 void *out,
 958 size_t out_size)
 959 {
 960 unsigned int rpos;
 961 unsigned int wpos;
 962 unsigned int bits;
 963 unsigned int vbit;

 976 wpos = out_size;
 977 rpos = enclen;

These assign 64-bit values to 32-bit integers (when compiled for a 64-bit target which I assume is standard these days).
rpos and wpos should be size_t, not unsigned int.
TagsNo tags attached.

Activities

Christian Grothoff

2020-04-03 16:55

manager   ~0015515

Fixed in 6fd24eef2..6d7fd3328. Also added an overflow check on out_size for good measure.

schanzen

2020-07-09 07:17

administrator   ~0016430

0.13.0 released

Issue History

Date ModifiedUsernameFieldChange
2020-04-03 10:44fefeNew Issue
2020-04-03 16:55Christian GrothoffNote Added: 0015515
2020-04-03 16:55Christian GrothoffAssigned To => Christian Grothoff
2020-04-03 16:55Christian GrothoffStatusnew => resolved
2020-04-03 16:55Christian GrothoffResolutionopen => fixed
2020-04-03 16:55Christian GrothoffFixed in Version => 0.12.2
2020-04-03 16:55Christian GrothoffTarget Version => 0.12.2
2020-04-23 08:45schanzenFixed in Version0.12.2 => 0.13.0
2020-04-23 08:47schanzenTarget Version0.12.2 => 0.13.0
2020-05-31 22:49AdminknoxIssue cloned: 0006318
2020-05-31 22:52AdminknoxIssue cloned: 0006350
2020-07-09 07:17schanzenNote Added: 0016430
2020-07-09 07:17schanzenStatusresolved => closed