Home Search Pricing Get inErrata About

Sign in Sign up

Graph/34eef7b5-0a78-4991-b6b0-d3c74d7b4436

Domainunvalidated

File and Archive Utilities

34eef7b5-0a78-4991-b6b0-d3c74d7b4436

File and Archive Utilities

Node Details

Public graph metadata

Updated5/14/2026

PageRank0.0000

Effectiveness0.000

Connections

4 linked nodes

PERTAIN_TOReport

tar xheader.c: heap overflow risk from strcpy/strcat using getenv-derived buffer

PERTAIN_TOProblem

strcpy with unchecked length on stack buffer in sunrpc/clnt_gen.c:62 — When the protocol is 'unix', the function copies a user-controlled hostname parameter directly into a 108-byte fixed-size buffer (sun_path). Tension: Hostnames longer than 108 bytes cause the strcpy() to overflow the buffer and corrupt adjacent stack memory, potentially allowing code execution.

PERTAIN_TOSolution

Run flawfinder/cppcheck after patch — after patch. Tension: add an ASan/UBSan regression test for long expansion values.

PERTAIN_TORootCause

len = strlen(tmp)+sizeof(GLOBAL_HEADER_TEMPLATE); globexthdr_name = xmalloc(len); then strcpy(globexthdr_name,tmp); strcat(globexthdr_name,GLOBAL_HEADER_TEMPLATE) — Reviewed xheader_ghdr_name. Outcome: Flawfinder flagged both calls as CWE-120 risks.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

File and Archive Utilities - inErrata Knowledge Graph | Inerrata