You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@harmony.apache.org by "Alexei Fedotov (JIRA)" <ji...@apache.org> on 2008/04/16 10:48:21 UTC
[jira] Created: (HARMONY-5741) [drlvm][verifier] thread unsafe and
buffer overflow vulnerable code in the verifer
[drlvm][verifier] thread unsafe and buffer overflow vulnerable code in the verifer
----------------------------------------------------------------------------------
Key: HARMONY-5741
URL: https://issues.apache.org/jira/browse/HARMONY-5741
Project: Harmony
Issue Type: Bug
Reporter: Alexei Fedotov
Negative cases are handled in a following way:
static char err_message[5000];
[...]
if (result != VF_OK) {
*error = &(err_message[0]);
Method_Handle method = class_get_method(klass, index);
sprintf(*error, "%s/%s%s, pass: %d, instr: %d, reason: %s", class_get_name(klass), method_get_name(method),
method_get_descriptor(method), context.pass, context.processed_instruction, context.error_message);
break;
}
The static buffer then is returned to the caller. Should use a local buffer and replace sprintf with snprintf.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Resolved: (HARMONY-5741) [drlvm][verifier] thread unsafe and
buffer overflow vulnerable code in the verifer
Posted by "Pavel Pervov (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HARMONY-5741?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Pavel Pervov resolved HARMONY-5741.
-----------------------------------
Resolution: Fixed
Assignee: Pavel Pervov
Fixed at revisions 653183 and 653229 (post-fix).
> [drlvm][verifier] thread unsafe and buffer overflow vulnerable code in the verifer
> ----------------------------------------------------------------------------------
>
> Key: HARMONY-5741
> URL: https://issues.apache.org/jira/browse/HARMONY-5741
> Project: Harmony
> Issue Type: Bug
> Components: DRLVM
> Reporter: Alexei Fedotov
> Assignee: Pavel Pervov
>
> Negative cases are handled in a following way:
> static char err_message[5000];
> [...]
> if (result != VF_OK) {
> *error = &(err_message[0]);
> Method_Handle method = class_get_method(klass, index);
> sprintf(*error, "%s/%s%s, pass: %d, instr: %d, reason: %s", class_get_name(klass), method_get_name(method),
> method_get_descriptor(method), context.pass, context.processed_instruction, context.error_message);
> break;
> }
> The static buffer then is returned to the caller. Should use a local buffer and replace sprintf with snprintf.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Closed: (HARMONY-5741) [drlvm][verifier] thread unsafe and
buffer overflow vulnerable code in the verifer
Posted by "Tim Ellison (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HARMONY-5741?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Tim Ellison closed HARMONY-5741.
--------------------------------
> [drlvm][verifier] thread unsafe and buffer overflow vulnerable code in the verifer
> ----------------------------------------------------------------------------------
>
> Key: HARMONY-5741
> URL: https://issues.apache.org/jira/browse/HARMONY-5741
> Project: Harmony
> Issue Type: Bug
> Components: DRLVM
> Reporter: Alexei Fedotov
> Assignee: Pavel Pervov
>
> Negative cases are handled in a following way:
> static char err_message[5000];
> [...]
> if (result != VF_OK) {
> *error = &(err_message[0]);
> Method_Handle method = class_get_method(klass, index);
> sprintf(*error, "%s/%s%s, pass: %d, instr: %d, reason: %s", class_get_name(klass), method_get_name(method),
> method_get_descriptor(method), context.pass, context.processed_instruction, context.error_message);
> break;
> }
> The static buffer then is returned to the caller. Should use a local buffer and replace sprintf with snprintf.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (HARMONY-5741) [drlvm][verifier] thread unsafe and
buffer overflow vulnerable code in the verifer
Posted by "Alexei Fedotov (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HARMONY-5741?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Alexei Fedotov updated HARMONY-5741:
------------------------------------
Component/s: DRLVM
> [drlvm][verifier] thread unsafe and buffer overflow vulnerable code in the verifer
> ----------------------------------------------------------------------------------
>
> Key: HARMONY-5741
> URL: https://issues.apache.org/jira/browse/HARMONY-5741
> Project: Harmony
> Issue Type: Bug
> Components: DRLVM
> Reporter: Alexei Fedotov
>
> Negative cases are handled in a following way:
> static char err_message[5000];
> [...]
> if (result != VF_OK) {
> *error = &(err_message[0]);
> Method_Handle method = class_get_method(klass, index);
> sprintf(*error, "%s/%s%s, pass: %d, instr: %d, reason: %s", class_get_name(klass), method_get_name(method),
> method_get_descriptor(method), context.pass, context.processed_instruction, context.error_message);
> break;
> }
> The static buffer then is returned to the caller. Should use a local buffer and replace sprintf with snprintf.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.