cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: mprintf MAX_PARAMETERS (was RE: Stack smashed when linked withpthreads)

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Tue, 1 Aug 2006 10:34:58 +0200 (CEST)

On Mon, 31 Jul 2006, Dan Fandrich wrote:

>> is now invoked with 14 format fields, so the potential exists for overrun.
>
> Does c-ares use mprintf? It has a sprintf call with 32 arguments.

No it does not. We keep c-ares separate, so we build it as a full lib and link
it with libcurl.

Ok, so we should probably decrase MAX_PARAMETERS but add a check in the code
just in case we'd extend something that makes it reach the boundary. I'll
welcome help!

-- 
  Commercial curl and libcurl Technical Support: http://haxx.se/curl.html
Received on 2006-08-01