[klee-dev] multiple buffer overflows in tools/klee/main.cpp

2011-04-14 Thread Cristian Cadar
Hi, could you submit a patch for these bugs? Cristian On 09/04/2011 11:20, Frank Busse wrote: > Hello, > > recently I read some sections of main.cpp and took notice of some too > optimistic uses of the C string functions. For instance (there are > more): > > 266: sprintf(buf, "%s/%s", directory.

[klee-dev] multiple buffer overflows in tools/klee/main.cpp

2011-04-09 Thread Frank Busse
Hello, recently I read some sections of main.cpp and took notice of some too optimistic uses of the C string functions. For instance (there are more): 266: sprintf(buf, "%s/%s", directory.c_str(), tmp); or 300: strcpy(m_outputDirectory, p.c_str()); It's easy to segfault klee with: >klee long_pa