uses of sprintf
 - uses constants to allocate buffers in many places for logging. it looks like 
these functions
   are called with fixed/checked arguments.
 - many constants seem to be ad hoc and undocumented
 - e.g. usr/lib/pkcs11/cca_stdll/loadsave.c (load_token_data): fname uses a big 
buffer, not
   MAX_PATH_LEN (which at least is used somewhere else).
 - usr/lib/pkcs11/tpm_stdll/tpm_openssl.c: openssl_write_key/openssl_read_key: 
fixed buffer for filenames
 -> in many places, the constant 2048 is used for path lengths (however 
MAX_PATH currently is
      4096 on Linux). this should be fixed unless we are sure that all paths 
used do fit the fixed buffer


** Changed in: opencryptoki (Ubuntu)
       Status: New => Incomplete

-- 
main inclusion request: opencryptoki
https://bugs.launchpad.net/bugs/247593
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to