Kirill Furman <[email protected]> ha escrit:

> stack-buffer overflow error occurs in the from_ascii() function.

Thanks for reporting.

> In this case, sizeof(buf) will be 11, but the end variable will point
> to buf + 11 or buf[11], which does not exist

The interpretation is wrong.  It perfectly exists, of course.  According
to the stnadard, "if two pointers to object types both point to the
same object, or both _point one past the last element_ of the same array
object, they compare equal." (emphasis is mine).  Consequently, both
proposed fixes are wrong.  The correct one is pushed as bf16382570.

Regards,
Sergey

Reply via email to