uses of sprintf - uses constants to allocate buffers in many places for logging. it looks like these functions are called with fixed/checked arguments. - many constants seem to be ad hoc and undocumented - e.g. usr/lib/pkcs11/cca_stdll/loadsave.c (load_token_data): fname uses a big buffer, not MAX_PATH_LEN (which at least is used somewhere else). - usr/lib/pkcs11/tpm_stdll/tpm_openssl.c: openssl_write_key/openssl_read_key: fixed buffer for filenames -> in many places, the constant 2048 is used for path lengths (however MAX_PATH currently is 4096 on Linux). this should be fixed unless we are sure that all paths used do fit the fixed buffer
** Changed in: opencryptoki (Ubuntu) Status: New => Incomplete -- main inclusion request: opencryptoki https://bugs.launchpad.net/bugs/247593 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs