stdcxx-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Martin Sebor (JIRA)" <j...@apache.org>
Subject [jira] Created: (STDCXX-68) [MSVC 8.0] strxfrm(s1, s2, 0) writes past the end of the destination buffer
Date Sat, 19 Nov 2005 00:51:42 GMT
[MSVC 8.0] strxfrm(s1, s2, 0) writes past the end of the destination buffer
---------------------------------------------------------------------------

         Key: STDCXX-68
         URL: http://issues.apache.org/jira/browse/STDCXX-68
     Project: STDCXX
        Type: Bug
  Components: External  
    Versions: 4.1.2    
 Environment: MSVC 8
    Reporter: Martin Sebor
 Assigned to: Martin Sebor 
     Fix For: 4.1.3


From
http://lab.msdn.microsoft.com/ProductFeedback/viewfeedback.aspx?feedbackid=b41c0882-79d0-412b-b404-d9ecb1952c31
======================================================================
Bug ID:              FDBK40793
Problem Type:        Bug
Status:              New
Microsoft Status:    Under Review
Opened Date:         2005-11-18 16:06:05
Opened By:           Martin Sebor
Product/Technology:  Visual C++
Version:             Visual Studio 2005
Product Language:    English
Category:            Libraries
OS:                  Windows 2000 Server
OS Language:         US English
Submission Language: English
======================================================================
Description:    
Opened by Martin Sebor on 2005-11-18 at 16:06:05
        
The C standard library function strxfrm() writes past the end of the destination
buffer.

======================================================================
Steps to Reproduce:

$ cat t.cpp && cl t.cpp && ./t.exe
#include <assert.h>
#include <locale.h>
#include <string.h>

int main ()
{
    setlocale (LC_COLLATE, "CAT");

    char s1 [2] = { '*', '*' };
    strxfrm (s1, "", 0);
    assert ('*' == s1 [0] && '*' == s1 [1]);
}
Microsoft (R) 32-bit C/C++ Optimizing Compiler Version 14.00.50727.42 for 80x86
Copyright (C) Microsoft Corporation. All rights reserved.

t.cpp
Microsoft (R) Incremental Linker Version 8.00.50727.42
Copyright (C) Microsoft Corporation. All rights reserved.

/out:t.exe
t.obj
Assertion failed: '*' == s1 [0] && '*' == s1 [1], file t.cpp, line 11

This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
======================================================================
Actual Results:         Runtime error.
Expected Results:       No error.


-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


Mime
View raw message