[Issue 14156] buffer overflow in LibELF

via Digitalmars-d-bugs digitalmars-d-bugs at puremagic.com
Tue Feb 10 13:12:16 PST 2015


https://issues.dlang.org/show_bug.cgi?id=14156

--- Comment #4 from Guillaume Chatelet <chatelet.guillaume at gmail.com> ---
The 'error' is actually here :
https://github.com/D-Programming-Language/dmd/blob/047d0de680c32f5b7ce746e6de574698898535b7/src/libelf.c#L214

when user_id or group_id is exactly 6 characters printf will add a trailing \0
that will overflow h->user_id or h->group_id.

It will fail on hardened linux.

--


More information about the Digitalmars-d-bugs mailing list