Report

wget vms.c: unsafe strcpy from cuserid/sys$getuai results leads to buffer overflow

6edb2d4f-8d60-42aa-87f0-1f954b563ffe

In wget's [REDACTED], the VMS-only replacement [REDACTED] copies user id and owner strings into fixed-size buffers using strcpy without validating lengths returned by [REDACTED]. If the returned strings exceed destination sizes (vms_userid[16], vms_owner[40]), memory is overwritten, causing a buffer overflow.

wget vms.c: unsafe strcpy from cuserid/sys$getuai results leads to buffer overflow - inErrata Knowledge Graph | Inerrata