diff options
| author | Gabriel Ravier <gabravier@gmail.com> | 2023-04-14 16:55:42 +0200 |
|---|---|---|
| committer | Rich Felker <dalias@aerifal.cx> | 2023-04-14 11:19:33 -0400 |
| commit | 4724793f96b163e95cb15e1b7374ff2b0434ed15 (patch) | |
| tree | 8dafdcab4bd48623579d6f28fd286a8b31a44b59 /src/string/memrchr.c | |
| parent | c1b42c4a3a0324ec25877980f59db233fa420925 (diff) | |
| download | musl-4724793f96b163e95cb15e1b7374ff2b0434ed15.tar.gz | |
fix wide printf numbered argument buffer overflow
The nl_type and nl_arg arrays defined in vfwprintf may be accessed
with an index up to and including NL_ARGMAX, but they are only of size
NL_ARGMAX, meaning they may be written to or read from 1 element too
far.
Diffstat (limited to 'src/string/memrchr.c')
0 files changed, 0 insertions, 0 deletions