Re: Re: strings / libbfd crasher

[Jakub Wilk <jwilk () jwilk net>]

* Michal Zalewski <lcamtuf () coredump cx>, 2014-10-27, 11:59:
> Well, there's also a trivial stack buffer overflow in srec.c near line 
> 254:
>
>      char buf[10];
> ...
>        sprintf (buf, "\\%03o", (unsigned int) c);
>
> But with this test case, c will be -44, or "\1777777777777777777724",

More likely "\37777777724"...

> which sounds a lot longer than 9 characters.

...which is still longer than 9.

--
Jakub Wilk