[Bug 211257] net/xmlrpc-c overflow warning

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=211257

            Bug ID: 211257
           Summary: net/xmlrpc-c overflow warning
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: garga at FreeBSD.org
          Reporter: w.schwarzenfeld at utanet.at
          Assignee: garga at FreeBSD.org
             Flags: maintainer-feedback?(garga at FreeBSD.org)

Don't know if it is realy relevant, but:

xmlrpc_datetime.c:164:17: warning: the value of the size argument in 'strncat'
is too large, might lead to a buffer overflow [-Wstrncat-size]
                STRSCAT(dtString, usecString);
                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
blddir/include/xmlrpc-c/string_int.h:125:24: note: expanded from macro
'STRSCAT'

and

xmlrpc_serialize.c:308:13: warning: the value of the size argument in 'strncat'
is too large, might lead to a buffer overflow [-Wstrncat-size]
            STRSCAT(dtString, usecString);
            ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
blddir/include/xmlrpc-c/string_int.h:125:24: note: expanded from macro
'STRSCAT'
--

macro is defined      in
net/xmlrpc-c/work/xmlrpc-c-1.39.08/src/blddir/include/xmlrpc-c/string_int.h

124 #define STRSCAT(A,B) \
125     (strncat((A), (B), sizeof(A)-strlen(A)), *((A)+sizeof(A)-1) = '\0')

-- 
You are receiving this mail because:
You are the assignee for the bug.