Re: Buffer overflow when using trunc_string()

2016-07-18 Fir de Conversatie Bram Moolenaar
Dominique Pellé wrote: > Bram Moolenaar wrote: > > > Yegappan Lakshmanan wrote: > > > >> Running the message_test executable with address sanitizer > >> enabled and the following test code in message_test.c: > >> > >> trunc_string((char_u *)"a text that fits", buf, 34, 40); > >> > >> produce

Re: Buffer overflow when using trunc_string()

2016-07-18 Fir de Conversatie Dominique Pellé
Bram Moolenaar wrote: > Yegappan Lakshmanan wrote: > >> Running the message_test executable with address sanitizer >> enabled and the following test code in message_test.c: >> >> trunc_string((char_u *)"a text that fits", buf, 34, 40); >> >> produces a buffer overflow in utf_head_off(): >> >>

Re: Buffer overflow when using trunc_string()

2016-07-18 Fir de Conversatie Bram Moolenaar
Yegappan Lakshmanan wrote: > Running the message_test executable with address sanitizer > enabled and the following test code in message_test.c: > > trunc_string((char_u *)"a text that fits", buf, 34, 40); > > produces a buffer overflow in utf_head_off(): > > AddressSanitizer: global-buffe

Buffer overflow when using trunc_string()

2016-07-17 Fir de Conversatie Yegappan Lakshmanan
Hi, Running the message_test executable with address sanitizer enabled and the following test code in message_test.c: trunc_string((char_u *)"a text that fits", buf, 34, 40); produces a buffer overflow in utf_head_off(): AddressSanitizer: global-buffer-overflow mbyte.c:3740 in utf_head_off