[exim-dev] [Bug 2909] New: Missing arguments in string_sprin…

Kezdőlap
Üzenet törlése
Válasz az üzenetre
Szerző: admin
Dátum:  
Címzett: exim-dev
Tárgy: [exim-dev] [Bug 2909] New: Missing arguments in string_sprinf call
https://bugs.exim.org/show_bug.cgi?id=2909

            Bug ID: 2909
           Summary: Missing arguments in string_sprinf call
           Product: Exim
           Version: 4.96
          Hardware: x86
                OS: All
            Status: NEW
          Severity: bug
          Priority: medium
         Component: TLS
          Assignee: jgh146exb@???
          Reporter: landgraf@???
                CC: exim-dev@???


The change "Symlink following for TLS creds files" from Aug 8,22 introduced a
string_sprintf call on line 159, a function that has the identical arguments as
sprintf. In the format "%.*s/%.*s", another four arguments are needed: an
integer for the width of the character string and a pointer to the character
buffer for each of the of the strings. While the integer arguments are provided
the pointers to the character buffers are missing.

This caused exim to crash with an SIGSEGV exception when the TLS credential
files are looked up whenever their filenames contain symbolic links.

To avoid the crash, line 159 in tls.c should be corrected with the following
code:

: string_sprintf("%.*s/%.*s", (int)(s - filename), filename, (int)len, buf);

--
You are receiving this mail because:
You are on the CC list for the bug.