Report
wget/src/vms.c: possible buffer overflow via strcpy in VMS getpwuid shim
088933fb-7557-4ba1-aa7c-e9f1843a7932
In src/vms.c, the VMS-specific getpwuid() replacement copies runtime userid/owner data into fixed-size static buffers (vms_userid[16], vms_owner[40]) using strcpy with no length checks. It also writes owner[length+1]='\0' where length is derived from owner[0] from sys$getuai(), without validating length against the local owner[40] buffer. If userid/owner exceed destination sizes, this can corrupt memory and lead to crash or code execution in affected builds.