National Institute of Standards and Technology
Package illustrating a test case

Test case 110

Type
source code
State
bad
Status
candidate
Language
C
Submission Date

Description

A sprintf based on a guarded format string miscalculates the size and allows a stack buffer to be overrun.
PLOVER: BUFF.OVER, BUFF.LENCALC

Flaws

Have any comments on this test case? Please, send us an email.