Recode icon indicating copy to clipboard operation
Recode copied to clipboard

possible buffer overflow when the input filename is too long

Open okias opened this issue 7 years ago • 1 comments

Hello.

Source code says:

char output_name[200]; /* FIXME: dangerous limit */ [...] input_name = argv[optind]; [...] strcpy (output_name, input_name);

This can't be good. Gentoo patchset doesn't cover this.

Please fix.

[1] https://bugs.gentoo.org/594444

okias avatar Aug 06 '17 08:08 okias

I have taken over the project at https://github.com/rrthomas/ and the bug is fixed in current git there; release shortly.

rrthomas avatar Jan 19 '18 00:01 rrthomas