Menu

#6 Printing thread-safety & overflow issues

open
Brent
None
8
2013-02-18
2002-01-23
Brent
No

there are many potential buffer overflows in this
program, in almost every function that takes
input. while those do not really matter, since its
for a "workstation" and not set*id anything.
there is the way it attempts to print data(locally
via lpr/etc):
...
strcat(print_command, " /tmp/gwcc_out.txt");
if (system(print_command) == -1) {
...
which gets directed to that (static) file, with no
checking. meaning any user could forge(link) that
filename and make it redirect the input elsewhere
-- potentially compromising other users.

other than that, pretty gtk gui, looks nice with
my theme :)

--
vade79 -> v9@fakehalo.deadpig.org ->
fakehalo.deadpig.org.

Discussion


Log in to post a comment.

MongoDB Logo MongoDB