Follow-up Comment #1, bug #63609 (project make):

The following code in warn_undefined causes a buffer overrun

++++
if (memcmp (*cp, name, len) == 0 && (*cp)[len] == '\0')
----

when len exceeds strlen (*cp). This happens when make needs to expand a
variable whos name is longer than *cp,


    _______________________________________________________

Reply to this item at:

  <https://savannah.gnu.org/bugs/?63609>

_______________________________________________
Message sent via Savannah
https://savannah.gnu.org/


Reply via email to