curl-library
Re: mprintf MAX_PARAMETERS (was RE: Stack smashed when linked withpthreads)
From: Daniel Stenberg <daniel_at_haxx.se>
Date: Tue, 1 Aug 2006 10:34:58 +0200 (CEST)
Date: Tue, 1 Aug 2006 10:34:58 +0200 (CEST)
On Mon, 31 Jul 2006, Dan Fandrich wrote:
>> is now invoked with 14 format fields, so the potential exists for overrun.
>
> Does c-ares use mprintf? It has a sprintf call with 32 arguments.
No it does not. We keep c-ares separate, so we build it as a full lib and link
it with libcurl.
Ok, so we should probably decrase MAX_PARAMETERS but add a check in the code
just in case we'd extend something that makes it reach the boundary. I'll
welcome help!
-- Commercial curl and libcurl Technical Support: http://haxx.se/curl.htmlReceived on 2006-08-01