Hi Colin,
On Tue, 2016-09-20 at 18:25 +0100, Colin King wrote:
> From: Colin Ian King
>
> The comparison of dr_v1->template_name_len is off-by-one, so
> currently if the length is MAX_TEMPLATE_NAME_LEN we end up
> with an out-of-bounds write on template_name when the terminating
> zero character
From: Colin Ian King
The comparison of dr_v1->template_name_len is off-by-one, so
currently if the length is MAX_TEMPLATE_NAME_LEN we end up
with an out-of-bounds write on template_name when the terminating
zero character is written. Fix the comparison.
Signed-off-by: Colin Ian King
---
securi
2 matches
Mail list logo
