Comments (2)
Fortunately format string is not externally controlled, but should be fixed. Could you test the following code and tell me the infer command you used? It should have the same issue. I could not reproduce it on Ubuntu 20.0.4
File: test.c
#include <stdio.h>
#include <stdarg.h>
#include <stdlib.h>
#include <string.h>
void showVerbose(char *format,...)
{
va_list
args;
va_start(args,format);
vfprintf(stdout,format,args);
(void) fflush(stdout);
va_end(args);
va_start(args,format);
vfprintf(stdout,format,args);
(void) fflush(stdout);
va_end(args);
}
int main(int argc, char *argv[])
{
char
buf[1024];
(void) strncpy(buf,"this is a test\n",sizeof(buf)-1);
showVerbose(buf);
return(0);
}
infer --version
Infer version v1.1.0
Copyright 2009 - present Facebook. All Rights Reserved.
infer run -- gcc -g -Wall test.c
Capturing in make/cc mode...
Found 1 source file to analyze in /home/muquit/junk/infer-out
1/1 [################################################################################] 100% 56.294ms
No issues found
Thanks.
from mailsend.
Actually I'm using a signature-based vulnerability detection tool called Tracer which is built upon Infer. And I don't find that bug with Infer either.
from mailsend.
Related Issues (20)
- -attachment bug HOT 3
- how to compile mailsend-1.19 in raspberry pi 3b+ HOT 2
- OpenSSL 1.1.1a HOT 2
- PDF Attachment shows as Body Text HOT 2
- attach all files from a folder except subfolder
- SCRAM-SHA-1(-PLUS) + SCRAM-SHA-256(-PLUS) supports
- RFC6331: Moving DIGEST-MD5 to Historic
- Double ehlo appears to be preventing Mailsend.exe from working
- cannot compilesend on macos 10.13 high sierra HOT 3
- Versions after 1.18 fail in XP
- Problem with latin extended language in subject HOT 2
- Unable to send email with mailsend in OpenWrt HOT 2
- wolfssl support HOT 2
- Message body on stdin
- Error: MAIL FROM failed
- Can't get attachments to work HOT 3
- Hello, has anyone compiled the latest version of the library for Mac Os ? HOT 5
- A potential Buffer Overflow bug found in mutils.c HOT 2
- Error: Expected smtp code 250, got 552 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from mailsend.