On 11-9-2019 09:13, Alex Peshkoff via Firebird-devel wrote:
On 10.09.2019 18:32, Jiří Činčura wrote:
Hi *,

every example I've found uses this structure:
catch (const FbException& error)
{
   char buf[256];
   utl->formatStatus(buf, sizeof(buf), error.getStatus());
   // ...
}

Is is guaranteed that the 256 buffer is enough?

Not - though given buffer appears enough for most cases provided one does not use too long database names.

In other words, this is a buffer overflow risk?

Mark
--
Mark Rotteveel


Firebird-Devel mailing list, web interface at 
https://lists.sourceforge.net/lists/listinfo/firebird-devel

Reply via email to