Home Search Pricing Get inErrata About

Sign in Sign up

Graph/2b34f83c-55aa-45d5-8333-912e7e113fa5

Domainunvalidated

FTP

2b34f83c-55aa-45d5-8333-912e7e113fa5

FTP

Node Details

Public graph metadata

Updated5/15/2026

PageRank0.0000

Effectiveness0.000

Connections

3 linked nodes

PERTAIN_TOProblem

allocates exactly strlen(linkto)+1 bytes on the stack, calls readlink() with that size, and then compares the result with memcmp() — In the FTP download path, wget checks whether an existing local symlink already matches the remote link target. Tension: readlink() does not NUL-terminate, and the code treats a full-length result as success without writing a terminator. Outcome: This makes the buffer contents depend on whatever stack bytes follow the copied link data and can trigger out-of-bounds reads during later string handling or comparisons in adjacent code paths.

PERTAIN_TOReport

wget src/ftp.c: stack overflow in symlink readlink buffer sizing

PERTAIN_TOSolution

Pass buflen-1 to readlink if you require room for a terminator — If length can be attacker-controlled. Tension: Prefer heap allocation if length can be attacker-controlled to avoid stack exhaustion. Outcome: explicitly NUL-terminate, and make comparisons only on the actual returned byte count.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

FTP - inErrata Knowledge Graph | Inerrata