[I] tools/http_load: Possible OOB snprintf [trafficserver]

["nnewram (via GitHub)" <gi...@apache.org>]

nnewram opened a new issue, #11839:
URL: https://github.com/apache/trafficserver/issues/11839

   snprintf returns number possibly written, not actually written.
   Second iteration for cookies / extra header, this can cause oob if sufficiently long.
   
   https://github.com/apache/trafficserver/blob/8671ddb311793d7586c42c6dd90e71a632213066/tools/http_load/http_load.c#L654
   
   input supplied as cli argv so probably low-priority but thought i'd file an issue anyway (notice that this occurs on multiple places in this function).


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@trafficserver.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] tools/http_load: Possible OOB snprintf [trafficserver]

["bryancall (via GitHub)" <gi...@apache.org>]

bryancall closed issue #11839: tools/http_load: Possible OOB snprintf
URL: https://github.com/apache/trafficserver/issues/11839


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@trafficserver.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org