Re: Stack BufferOverflow in readelf.c

2023-04-27 Thread Andreas Schwab
On Apr 27 2023, 2ourc3 1er wrote: > The function includes a declaration of a fixed-sized buffer, *char > name_buf[40];*, which is used later in the function with the *sprintf* > function:* sprintf* (*name_buf*, "", > (unsigned int) *psym->st_shndx*); > > The problem with this implementation is t

Stack BufferOverflow in readelf.c

2023-04-27 Thread 2ourc3 1er
Dears, I am writing to bring to your attention a potential issue in the function *dump_relocations *in the software* readelf.c.* The function includes a declaration of a fixed-sized buffer, *char name_buf[40];*, which is used later in the function with the *sprintf* function:* sprintf* (*name_buf