[libxslt] Fix buffer overflow in exsltDateFormat



commit 5d0c6565bab5b9b7efceb33b626916d22b4101a7
Author: Nick Wellnhofer <wellnhofer aevum de>
Date:   Thu Apr 28 17:34:27 2016 +0200

    Fix buffer overflow in exsltDateFormat
    
    Long years can overflow a stack-based buffer on 64-bit platforms by
    up to four bytes.
    
    Thanks to Nicolas Gregoire for the report.
    
    Fixes bug #765380:
    
    https://bugzilla.gnome.org/show_bug.cgi?id=765380

 libexslt/date.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)
---
diff --git a/libexslt/date.c b/libexslt/date.c
index 272c61b..12c9919 100644
--- a/libexslt/date.c
+++ b/libexslt/date.c
@@ -1283,7 +1283,7 @@ exsltDateFormat (const exsltDateValPtr dt)
     }
 
     if (dt->type & XS_GYEAR) {
-        xmlChar buf[20], *cur = buf;
+        xmlChar buf[100], *cur = buf;
 
         FORMAT_GYEAR(dt->value.date.year, cur);
         if (dt->type == XS_GYEARMONTH) {


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]