View Issue Details [ Jump to Notes ] [ Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0009267CMakeCMakepublic2009-07-13 14:422011-06-06 18:25
ReporterAndrey Rahmatullin 
Assigned ToBill Hoffman 
PrioritynormalSeveritymajorReproducibilityalways
StatusclosedResolutionduplicate 
PlatformOSOS Version
Product VersionCMake-2-6 
Target VersionFixed in VersionCMake 2.8.4 
Summary0009267: Buffer overflows in SystemInformation.cxx
DescriptionIn file included from /usr/include/stdio.h:913,
                 from /home/wrar/tmp/BUILD/cmake-2.6.4/Source/kwsys/SystemInformation.cxx:68:
In function 'int sprintf(char*, const char*, ...)',
    inlined from 'bool cmsys::SystemInformationImplementation::RetrieveClassicalCPUIdentity()' at /home/wrar/tmp/BUILD/cmake-2.6.4/Source/kw
sys/SystemInformation.cxx:1899:
/usr/include/bits/stdio2.h:35: warning: call to int __builtin___sprintf_chk(char*, int, unsigned int, const char*, ...) will always overflow
 destination buffer
In function 'int sprintf(char*, const char*, ...)',
    inlined from 'bool cmsys::SystemInformationImplementation::RetrieveClassicalCPUIdentity()' at /home/wrar/tmp/BUILD/cmake-2.6.4/Source/kw
sys/SystemInformation.cxx:1900:
/usr/include/bits/stdio2.h:35: warning: call to int __builtin___sprintf_chk(char*, int, unsigned int, const char*, ...) will always overflow
 destination buffer
In function 'int sprintf(char*, const char*, ...)',
    inlined from 'bool cmsys::SystemInformationImplementation::RetrieveClassicalCPUIdentity()' at /home/wrar/tmp/BUILD/cmake-2.6.4/Source/kw
sys/SystemInformation.cxx:1901:
/usr/include/bits/stdio2.h:35: warning: call to int __builtin___sprintf_chk(char*, int, unsigned int, const char*, ...) will always overflow
 destination buffer

That's because string literals in lines 1899..1901 are longer than CHIPNAME_STRING_LENGTH.
TagsNo tags attached.
Attached Files

 Relationships
duplicate of 0011018closedBen Boeckel CMake compilation fails with buffer overflow detected 

  Notes
(0017432)
Bill Hoffman (manager)
2009-09-14 12:30

 It is 48+1 in CVS CMake, those strings are only about 20 chars long, should fit...
(0017487)
Andrey Rahmatullin (reporter)
2009-09-14 16:20

 Those strings are 54+1, 57+1 and 61+1 in 2.6.4.
(0018445)
Andrey Rahmatullin (reporter)
2009-11-16 11:47

 In 2.8.0 they are the same as in 2.6.4, so I don't know what were you speaking about.
(0025266)
David Cole (manager)
2011-02-03 18:53

 There was another bug report on this one, too, and it is fixed in 2.8.4.
(0026696)
David Cole (manager)
2011-06-06 18:25

 Closing resolved issues that have not been updated in more than 3 months.

 Issue History
Date Modified Username Field Change
2009-07-13 14:42 Andrey Rahmatullin New Issue
2009-09-14 12:30 Bill Hoffman Note Added: 0017432
2009-09-14 12:30 Bill Hoffman Status new => assigned
2009-09-14 12:30 Bill Hoffman Assigned To => Bill Hoffman
2009-09-14 16:20 Andrey Rahmatullin Note Added: 0017487
2009-09-14 16:20 Andrey Rahmatullin Note Added: 0017488
2009-09-14 16:20 Andrey Rahmatullin Note Deleted: 0017488
2009-11-16 11:47 Andrey Rahmatullin Note Added: 0018445
2011-02-03 18:53 David Cole Note Added: 0025266
2011-02-03 18:53 David Cole Relationship added duplicate of 0011018
2011-02-03 18:53 David Cole Status assigned => resolved
2011-02-03 18:53 David Cole Fixed in Version => CMake 2.8.4
2011-02-03 18:53 David Cole Resolution open => duplicate
2011-06-06 18:25 David Cole Status resolved => closed
2011-06-06 18:25 David Cole Note Added: 0026696

Copyright © 2000 - 2018 MantisBT Team