[cups.bugs] [MOD] STR #3594: ppdc buffer overrun with unterminated string

twaugh.redhat twaugh at redhat.com
Wed Jun 2 09:29:15 PDT 2010


DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR New]

If there is an unterminated string in the input drv file, variable
substitution causes a buffer overrun once the buffer has filled up.

Fix attached.

Link: http://www.cups.org/str.php?L3594
Version: 1.4.3
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: 0001-Fixed-buffer-overrun-in-ppdc-source.cxx.patch
URL: <http://lists.cups.org/pipermail/cups-devel/attachments/20100602/ce3dba2b/attachment.ksh>


More information about the cups-devel mailing list