view tests/ref/vc1/SA00040.vc1.md5 @ 35394:7bad316da87a

stream ftp: Pass full buffer size to snprintf Previously the buffer size was always passed as one less than the underlying buffer's size. This is not using the underlying buffer to its full potential according to the C99 standard. The last byte of the buffers were never used. No vulnerabilities should have been caused by this mistake because the strings stored in the buffers were zero terminated at all times. Neither were out-of-array writes nor reads possible.

c082ec7483db93cfc769f282980d91ee frame00000000
c082ec7483db93cfc769f282980d91ee frame00000001
c082ec7483db93cfc769f282980d91ee frame00000002
d037b1bc7e8c18ee05b1241123abc192 frame00000003
1a26598bd2d2afcaa907553f7f76323d frame00000004
2ca19a43af9eed9badc2f33cdd734c91 frame00000005
c4be81eceaa9e5f457205fefe144320a frame00000006
c4be81eceaa9e5f457205fefe144320a frame00000007
333570008393d36126f09a6972b684d6 frame00000008
333570008393d36126f09a6972b684d6 frame00000009
36d8dada953ca6a2b7cbdee78acf134e frame00000010
36d8dada953ca6a2b7cbdee78acf134e frame00000011
36d8dada953ca6a2b7cbdee78acf134e frame00000012
36d8dada953ca6a2b7cbdee78acf134e frame00000013