[vlc-devel] [vlc-commits] access: ftp: fix potential invalid write.

Rémi Denis-Courmont remi at remlab.net
Sat Dec 6 18:06:39 CET 2014


Le vendredi 05 décembre 2014, 23:23:04 Fabian Yamaguchi a écrit :
> A buffer based on the length of the string to be sent via ftp
> was allocated on the stack and hence, it could not be verified whether the
> allocation succeeded.

Please explain how a string of 11 bytes or less can fail to be allocated on 
the stack, or how it will be larger than that.

> Allocate the buffer on the heap instead to avoid
> a potential invalid write in a subsequent memcpy.

Please explain where the invalid write is.

-- 
Rémi Denis-Courmont
http://www.remlab.net/




More information about the vlc-devel mailing list