slibc

slibc copied to clipboard

Hi, Although this project seems inactive, I felt it would be a good idea to bring this up anyway. There are two security problems with the `wcsndup()` function as implemented...

Elizafox

problems with strstr

2

it must not compute `strlen(haystack)` ``` c char haystack[] = { 'A', 'A', ...... 10GB ...... 'A', 0 }, needle[] = { 'A', 0 }; char *ptr = strstr(haystack, needle);...

izabera