Report
wget: VMS getpwuid() uses strcpy into fixed-size buffers without bounds checking
5c2372fc-e952-4a03-be40-0e5bddbac565
In src/vms.c, the VMS-specific replacement for getpwuid() copies cuserid() output and owner fields returned by sys$getuai() into fixed-size global buffers (vms_userid[16], vms_owner[40]) using strcpy(). There is no check that the returned strings fit, so long identifiers can overflow these buffers.