Mailing-List: contact commits-help@harmony.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@harmony.apache.org
Message-ID: <2140574359.1246023667556.JavaMail.jira@brutus>
Date: Fri, 26 Jun 2009 06:41:07 -0700 (PDT)
From: "Tim Ellison (JIRA)" <jira@apache.org>
To: commits@harmony.apache.org
Subject: [jira] Closed: (HARMONY-5741) [drlvm][verifier] thread unsafe and
 buffer overflow vulnerable code in the verifer
In-Reply-To: <1244255739.1208335701972.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/HARMONY-5741?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Tim Ellison closed HARMONY-5741.
--------------------------------


> [drlvm][verifier] thread unsafe and buffer overflow vulnerable code in the verifer
> ----------------------------------------------------------------------------------
>
>                 Key: HARMONY-5741
>                 URL: https://issues.apache.org/jira/browse/HARMONY-5741
>             Project: Harmony
>          Issue Type: Bug
>          Components: DRLVM
>            Reporter: Alexei Fedotov
>            Assignee: Pavel Pervov
>
> Negative cases are handled in a following way:
> static char err_message[5000];
> [...]
> if (result != VF_OK) {
>     *error = &(err_message[0]);
>     Method_Handle method = class_get_method(klass, index);
>     sprintf(*error, "%s/%s%s, pass: %d, instr: %d, reason: %s", class_get_name(klass), method_get_name(method),
>     method_get_descriptor(method), context.pass, context.processed_instruction, context.error_message);
>     break;
> }
> The static buffer then is returned to the caller. Should use a local buffer and replace sprintf with snprintf.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.